diff --git a/internal/config/config.go b/internal/config/config.go
index bfacc99ed021e974f160feaae4008cd93b6b1f76..f1c1ca31f0de50a71a737cf98d33dbf2127f89aa 100644
--- a/internal/config/config.go
+++ b/internal/config/config.go
@@ -97,7 +97,12 @@ func NewConfig(cfg *config.Config) (*Config, error) {
 	} else {
 		displayHost = host
 	}
-	yamlConfig := fmt.Sprintf(defaultConfig, displayHost, port, anonAccess)
+	yamlConfig := fmt.Sprintf(defaultConfig,
+		displayHost,
+		port,
+		anonAccess,
+		len(pks) == 0,
+	)
 	if len(pks) == 0 {
 		yamlUsers = defaultUserConfig
 	} else {
@@ -186,6 +191,7 @@ func (cfg *Config) createDefaultConfigRepo(yaml string) error {
 	rs := cfg.Source
 	err := rs.LoadRepo(cn)
 	if os.IsNotExist(err) {
+		log.Printf("creating default config repo %s", cn)
 		repo, err := ggit.PlainInit(rp, true)
 		if err != nil {
 			return err
diff --git a/internal/config/defaults.go b/internal/config/defaults.go
index 052e6a1f6418585666b58f25a565b21d974da322..295c93487e11fc8cd243ad06f2bb98f6c0f29809 100644
--- a/internal/config/defaults.go
+++ b/internal/config/defaults.go
@@ -17,7 +17,7 @@ anon-access: %s
 
 # You can grant read-only access to users without private keys. Any password
 # will be accepted.
-allow-keyless: false
+allow-keyless: %t
 
 # Customize repo display in the menu.
 repos:
diff --git a/internal/git/git.go b/internal/git/git.go
index f755465c30f9c43072a263385756a23a6569d487..89762d524c558aecdf42552c0e75fb20a0abb7a7 100644
--- a/internal/git/git.go
+++ b/internal/git/git.go
@@ -201,7 +201,6 @@ func (rs *RepoSource) LoadRepo(name string) error {
 	rp := filepath.Join(rs.Path, name)
 	r, err := rs.open(rp)
 	if err != nil {
-		log.Printf("error opening repository %s: %s", name, err)
 		return err
 	}
 	rs.repos[name] = r