diff --git a/group_vars/gitea/vars b/group_vars/gitea/vars
index 2da3f75..f2039bb 100644
--- a/group_vars/gitea/vars
+++ b/group_vars/gitea/vars
@@ -36,7 +36,8 @@ nft_deny_list: |
   ip saddr 94.103.188.103 counter drop comment "2024-03-22: user profile spam"
   ip saddr 78.40.116.193 counter drop comment "2024-03-22: user profile spam"
   ip saddr 159.253.120.5 counter drop comment "2024-03-22: user profile spam"
-  ip saddr 176.123.1.195 counter drop comment "2024-03-31: created 108 unactivated accounts"
+  ip saddr 176.123.0.0/21 counter drop comment "2024-03-31: created 108 unactivated accounts"
   ip saddr 43.225.192.242 counter drop comment "2024-04-04: advertising in user profile"
   ip saddr 117.216.199.83 counter drop comment "2024-04-16: advertising in user profile"
   ip saddr 37.221.65.103  counter drop comment "2024-04-17: user profile spam"
+  ip saddr 168.100.10.122  counter drop comment "2024-04-18: user profile spam"
diff --git a/roles/gitea/templates/app.ini.j2 b/roles/gitea/templates/app.ini.j2
index 6ba42ed..fffedbc 100644
--- a/roles/gitea/templates/app.ini.j2
+++ b/roles/gitea/templates/app.ini.j2
@@ -47,7 +47,7 @@ REGISTER_EMAIL_CONFIRM = true
 ENABLE_NOTIFY_MAIL = true
 DISABLE_REGISTRATION = false
 ALLOW_ONLY_EXTERNAL_REGISTRATION = false
-ENABLE_CAPTCHA = false
+ENABLE_CAPTCHA = true
 REQUIRE_SIGNIN_VIEW = false
 DEFAULT_KEEP_EMAIL_PRIVATE = false
 DEFAULT_ALLOW_CREATE_ORGANIZATION = true