feat: option to disable note creation

The abuse of the demo instance required us to disallow note creation

Signed-off-by: Erik Michelson <github@erik.michelson.eu>
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>

lib/web/note/controller.js

@@ -82,6 +82,9 @@ exports.showNote = function (req, res, next) {
 }
 
 exports.createFromPOST = function (req, res, next) {
+  if (config.disableNoteCreation) {
+    return errors.errorForbidden(res)
+  }
   let body = ''
   if (req.body && req.body.length > config.documentMaxLength) {
     return errors.errorTooLong(res)