By default, users from the configured authentication provider can login to Woodpecker.

If you want to prevent new users from signing in, you can disable this by setting export WOODPECKER_OPEN=false in /app/data/env.sh.