Whenever bin/gmg adduser is used, a minor error is raised because the code filters the User table for a unicode string using a non-unicode string. This is the error that is raised:

mediagoblin/local/lib/python2.7/site-packages/SQLAlchemy-0.8.2-py2.7-linux-i686.egg/sqlalchemy/engine/default.py:459: SAWarning: Unicode type received non-unicode bind param value.
  param.append(processors[key](compiled_params[key]))

This doesn't affect functionality at all, but may be confusing if unfixed.

It would be cool if this trac instance didn't permit non-https access, especially when people are entering login credentials. People shouldn't be reusing credentials between sites, but some people do anyway.

It might be worth deferring this until you have an SSL certificate signed by a CA that normal browsers will recognize.

On ​http://mediagoblin.readthedocs.org/en/v0.5.1/siteadmin/deploying.html , the instructions for deploying mediagoblin itself are:

git clone git://gitorious.org/mediagoblin/mediagoblin.git
cd mediagoblin
git submodule init && git submodule update

It would probably be a good idea to recommend that users make sure that they're getting the real mediagoblin code, and not a trojan or something. One part of doing that would be to point them at the https URL (see #786), but since tags are signed, it might be a good idea to include instructions for checking signed tags too.