diff --git a/machines/gerd/services/wger/default.nix b/machines/gerd/services/wger/default.nix
index 26c0394..fa5b9cb 100644
--- a/machines/gerd/services/wger/default.nix
+++ b/machines/gerd/services/wger/default.nix
@@ -19,6 +19,11 @@ in {
     # wger specific settings
     wgerSettings = {
       EMAIL_FROM = "wger Workout Manager <wger@${svc_domain}>";
+
+      # use authelia for authentication (disable guest users + regisration)
+      AUTH_PROXY_HEADER = config.mine.shared.lib.authelia.protectedHeaders.username;
+      ALLOW_GUEST_USERS = false;
+      ALLOW_REGISTRATION = false;
     };
 
     # django specific settings