The documentation of allowAnonymous and related settings are not really clear.
If I suspect right it works like:
allowAnonymouscontrols whether guests can create new notesallowAnonymousEditscontrols whether Freely edit mode can be selected (so guests can edit freely notes anyway)- if
requireFreeURLAuthenticationis false then guests can create new notes anyway.
I have tried to find where the docs are in the repo… I wasn’t good enough. Found the docs, haven’t found this section. (Nor my best friend, grep.)
So I guess stopping most common spambots require:
"allowAnonymous": false,
"allowAnonymousEdits": true,
"allowEmailRegister": true,
"allowFreeURL": true,
"requireFreeURLAuthentication": true,