diff --git a/charts/auth/templates/ui.yaml b/charts/auth/templates/ui.yaml
index e3eb4a6..c9e9416 100644
--- a/charts/auth/templates/ui.yaml
+++ b/charts/auth/templates/ui.yaml
@@ -91,3 +91,4 @@
         - --email-domain={{ .Values.ui.domain }}
         - --api-port=8081
         - --kratos-api=http://kratos-admin.{{ .Release.Namespace }}.svc.cluster.local
+        - --enable-registration={{ .Values.ui.enableRegistration }}
diff --git a/core/auth/ui/.gitignore b/core/auth/ui/.gitignore
index dc33f72..cbfcd69 100644
--- a/core/auth/ui/.gitignore
+++ b/core/auth/ui/.gitignore
@@ -1,2 +1,3 @@
+server
 server_arm64
 server_amd64
diff --git a/core/auth/ui/main.go b/core/auth/ui/main.go
index 1b5f41a..7cb1f4d 100644
--- a/core/auth/ui/main.go
+++ b/core/auth/ui/main.go
@@ -28,6 +28,8 @@
 var apiPort = flag.Int("api-port", 8081, "API Port to listen on")
 var kratosAPI = flag.String("kratos-api", "", "Kratos API address")
 
+var enableRegistration = flag.Bool("enable-registration", false, "If true account registration will be enabled")
+
 var ErrNotLoggedIn = errors.New("Not logged in")
 
 //go:embed templates/*
@@ -75,20 +77,21 @@
 }
 
 type Server struct {
-	r      *mux.Router
-	serv   *http.Server
-	kratos string
-	hydra  *HydraClient
-	tmpls  *Templates
+	r                  *mux.Router
+	serv               *http.Server
+	kratos             string
+	hydra              *HydraClient
+	tmpls              *Templates
+	enableRegistration bool
 }
 
-func NewServer(port int, kratos string, hydra *HydraClient, tmpls *Templates) *Server {
+func NewServer(port int, kratos string, hydra *HydraClient, tmpls *Templates, enableRegistration bool) *Server {
 	r := mux.NewRouter()
 	serv := &http.Server{
 		Addr:    fmt.Sprintf(":%d", port),
 		Handler: r,
 	}
-	return &Server{r, serv, kratos, hydra, tmpls}
+	return &Server{r, serv, kratos, hydra, tmpls, enableRegistration}
 }
 
 func cacheControlWrapper(h http.Handler) http.Handler {
@@ -103,8 +106,10 @@
 	var staticFS = http.FS(static)
 	fs := http.FileServer(staticFS)
 	s.r.PathPrefix("/static/").Handler(cacheControlWrapper(fs))
-	s.r.Path("/register").Methods(http.MethodGet).HandlerFunc(s.registerInitiate)
-	s.r.Path("/register").Methods(http.MethodPost).HandlerFunc(s.register)
+	if s.enableRegistration {
+		s.r.Path("/register").Methods(http.MethodGet).HandlerFunc(s.registerInitiate)
+		s.r.Path("/register").Methods(http.MethodPost).HandlerFunc(s.register)
+	}
 	s.r.Path("/login").Methods(http.MethodGet).HandlerFunc(s.loginInitiate)
 	s.r.Path("/login").Methods(http.MethodPost).HandlerFunc(s.login)
 	s.r.Path("/consent").Methods(http.MethodGet).HandlerFunc(s.consent)
@@ -245,7 +250,10 @@
 		return
 	}
 	w.Header().Set("Content-Type", "text/html")
-	if err := s.tmpls.Login.Execute(w, csrfToken); err != nil {
+	if err := s.tmpls.Login.Execute(w, map[string]any{
+		"csrfToken":          csrfToken,
+		"enableRegistration": s.enableRegistration,
+	}); err != nil {
 		http.Error(w, err.Error(), http.StatusInternalServerError)
 		return
 	}
@@ -513,6 +521,7 @@
 			*kratos,
 			NewHydraClient(*hydra),
 			t,
+			*enableRegistration,
 		)
 		log.Fatal(s.Start())
 	}()
diff --git a/core/auth/ui/templates/login.html b/core/auth/ui/templates/login.html
index f01f157..1ed3d40 100644
--- a/core/auth/ui/templates/login.html
+++ b/core/auth/ui/templates/login.html
@@ -3,9 +3,10 @@
 <form action="" method="POST">
 	<input type="text" name="username" placeholder="Username" autofocus required />
 	<input type="password" name="password" placeholder="Password" required />
-	<input type="hidden" name="csrf_token" value="{{ . }}" />
+	<input type="hidden" name="csrf_token" value="{{ .csrfToken }}" />
 	<button type="submit">Sign In</button>
 </form>
+{{- if .enableRegistration -}}
 <nav>
 	<ul>
 		<li>
@@ -13,4 +14,5 @@
 		</li>
 	</ul>
 </nav>
+{{- end -}}
 {{ end }}
diff --git a/core/installer/values-tmpl/core-auth.yaml b/core/installer/values-tmpl/core-auth.yaml
index 219b6c4..26af983 100644
--- a/core/installer/values-tmpl/core-auth.yaml
+++ b/core/installer/values-tmpl/core-auth.yaml
@@ -296,3 +296,4 @@
       domain: {{ .Global.Domain }}
       internalDomain: p.{{ .Global.Domain }}
       hydra: hydra-admin.{{ .Global.Id }}-core-auth.svc.cluster.local
+      enableRegistration: false