Enable password self-registration and keep SSO off.

Public sign-up was closed, and the live Google and Microsoft apps would have become sign-up buttons if the same flag turned both on.

.env.example

@@ -39,8 +39,11 @@ EMAIL_USE_TLS=true
 # Captcha (optional local)
 CAPTCHA_SECRET_KEY=
 
-# Self-serve sign-up (default false — set true to allow /user/create/)
-ENABLE_ACCOUNT_REGISTRATION=false
+# Password self-serve sign-up (default true). Set false to close /user/create/.
+ENABLE_ACCOUNT_REGISTRATION=true
+# Browser SSO. Leave false until Google / Microsoft sign-in should be public.
+# Client ids below can still be set for Drive linking.
+ENABLE_SSO=false
 
 # OAuth SSO — Google / Microsoft (#24). Leave blank to hide SSO buttons.
 # Redirect URIs (register in each IdP console):