People and sign-up

Who can join

An admin chooses this on the People page, or you can fix it with SIGN_UP in .env.

Setting	What it means
open	Anyone can make an account. This is the default.
approval	Anyone can sign up, but an admin approves each account before it can be used.
closed	Only people an admin invites.

Everyone sees only their own matches. Admins are no exception: being an admin doesn’t let anyone see other people’s matches.

Upgrading from an older server

SIGN_UP in the environment beats a choice made on the People page, and the old .env.example set SIGN_UP=open. If you chose differently on that page, remove the line or set it to your choice before upgrading.

Admins

Admins can invite people, approve or decline new accounts, and make other accounts admins. They can’t change their own admin status.

ADMIN_EMAILS in .env names admins by address, comma-separated. They can’t be changed in the web app, and those addresses can always sign up, even when sign-up is closed. It’s optional: the first account on a new server becomes an admin either way.

Inviting someone

On People, make an invitation with an optional name and email.

• It works once, for 14 days, and makes an account whatever the sign-up setting says.
• With an email, only that address can use it. Without one, anyone with the link can, once.
• You can copy the link, share it as a QR code that the phone app scans, or have it emailed if email is set up.
• Unused invitations can be canceled.

Approving accounts

With SIGN_UP=approval, a new account can sign in but sees only a waiting page until it’s approved. It can’t reach any data, make API keys or link a watch.

Waiting accounts are at the top of People, with Approve and Decline. Declining deletes the account, and they can sign up again. If email is set up, admins are told when someone is waiting, and people are told when they’re approved.

Forgotten passwords

With email set up, people can reset their own password. Without it, an admin makes a password reset link on People and sends it however they like.

Admins can also suspend and delete accounts there.

Note

Resetting a password doesn’t end the account’s other sessions. To end them, use Sign out everywhere else in Settings, which is also offered on the phones.