diff --git a/.gitmodules b/.gitmodules
index 01d7e6d..de04775 100644
--- a/.gitmodules
+++ b/.gitmodules
@@ -1,3 +1,3 @@
 [submodule "roles/gitea"]
 	path = roles/gitea
-	url = https://github.com/thomas-maurice/ansible-role-gitea.git
+	url = ssh://gitea@dev.ccchb.de:2222/ccchb/ansible-role-gitea.git
diff --git a/host_vars/gitea.emma.ccchb.de.yml b/host_vars/gitea.emma.ccchb.de.yml
index 7f4e0e1..12fe601 100644
--- a/host_vars/gitea.emma.ccchb.de.yml
+++ b/host_vars/gitea.emma.ccchb.de.yml
@@ -2,26 +2,40 @@ vm_index: 2
 
 gitea_version: "1.12.4"
 gitea_app_name: "dev.ccchb.de"
-gitea_ssh_domain: "dev.ccchb.de"
-gitea_http_domain: "dev.ccchb.de"
+
+# technical:
 gitea_root_url: "https://dev.ccchb.de"
 
+gitea_http_domain: "dev.ccchb.de"
 gitea_http_listen: "[::]" 
 gitea_http_port: 443
-gitea_systemd_cap_net_bind_service: true
 gitea_protocol: "https"
+gitea_systemd_cap_net_bind_service: true
 gitea_http_letsencrypt_mail: "webmaster@ccchb.de"
 
+gitea_ssh_domain: "dev.ccchb.de"
 gitea_ssh_listen: "[::]" 
 gitea_ssh_port: 2222
 gitea_start_ssh: true
 
-# Don't use a public CDN for frontend assets
+gitea_mailer_enabled: true
+gitea_mailer_type: sendmail
+gitea_enable_notify_mail: true
+
+# permission:
+gitea_require_signin: false
+gitea_enable_captcha: true
+
+# privacy:
 gitea_offline_mode: true
 gitea_disable_gravatar: true
-gitea_enable_captcha: false
+gitea_log_systemd: true
+gitea_log_only_warning: true
 
 user_mgmt:
+  crest:
+    state: present
+    groups: sudo
   genofire:
     state: present
     groups: sudo
diff --git a/roles/gitea b/roles/gitea
index f2c8610..cb08c9f 160000
--- a/roles/gitea
+++ b/roles/gitea
@@ -1 +1 @@
-Subproject commit f2c8610cc41bad258076ea8df664da228ed467b6
+Subproject commit cb08c9f99997167aa35f2cef0a30ca914e2d159d