diff --git a/upub/routes/src/activitypub/application.rs b/upub/routes/src/activitypub/application.rs
index 2984bca..b03d7e2 100644
--- a/upub/routes/src/activitypub/application.rs
+++ b/upub/routes/src/activitypub/application.rs
@@ -47,7 +47,7 @@ pub async fn search(
 	AuthIdentity(auth): AuthIdentity,
 	Query(page): Query<PaginatedSearch>,
 ) -> crate::ApiResult<JsonLD<serde_json::Value>> {
-	if !auth.is_local() && ctx.cfg().security.allow_public_search {
+	if !auth.is_local() && !ctx.cfg().security.allow_public_search {
 		return Err(crate::ApiError::forbidden());
 	}