diff --git a/conf/.env.example b/conf/.env.example
index d083f7a..ddaa8cd 100644
--- a/conf/.env.example
+++ b/conf/.env.example
@@ -111,8 +111,8 @@ AUTHENTICATION_GUARD=web-guard
 # Check your proxy documentation to find out how these headers are named (i.e 'REMOTE_USER', 'REMOTE_EMAIL', etc...)
 # (only relevant when AUTHENTICATION_GUARD is set to 'reverse-proxy-guard')
 
-AUTH_PROXY_HEADER_FOR_USER=
-AUTH_PROXY_HEADER_FOR_EMAIL=
+AUTH_PROXY_HEADER_FOR_USER=null
+AUTH_PROXY_HEADER_FOR_EMAIL=null
 
 # Custom logout URL to open when using an auth proxy.
 
@@ -123,12 +123,14 @@ PROXY_LOGOUT_URL=null
 
 # Relying Party name, aka the name of the application. If null, defaults to APP_NAME
 
-WEBAUTHN_NAME=
+WEBAUTHN_NAME=2FAuth
 
 # Relying Party ID. If null, the device will fill it internally.
 # See https://webauthn-doc.spomky-labs.com/pre-requisites/the-relying-party#how-to-determine-the-relying-party-id
 
-WEBAUTHN_ID=
+WEBAUTHN_ID=null
+# WEBAUTHN_ICON=null
+# [/DEPRECATED]
 
 # Optional image data in BASE64 (128 bytes maximum) or an image url
 # See https://webauthn-doc.spomky-labs.com/pre-requisites/the-relying-party#relying-party-icon
@@ -148,14 +150,14 @@ WEBAUTHN_ICON=
 #   'preferred' (default) : Will ask for user verification IF POSSIBLE
 #   'discouraged' : Will NOT ask for user verification (for example, to minimize disruption to the user interaction flow)
 
-WEBAUTHN_USER_VERIFICATION=
+WEBAUTHN_USER_VERIFICATION=preferred
 
 # Use this setting to declare trusted proxied.
 # Supported:
 #   '*': to trust any proxy
 #   A comma separated IP list: The list of proxies IP to trust
 
-TRUSTED_PROXIES=
+TRUSTED_PROXIES=null
 
 # Leave the following configuration vars as is.
 # Unless you like to tinker and know what you're doing.
diff --git a/scripts/upgrade b/scripts/upgrade
index f10fe6f..ff1003b 100644
--- a/scripts/upgrade
+++ b/scripts/upgrade
@@ -47,7 +47,7 @@ then
 	ynh_script_progression --message="Upgrading source files..." --weight=3
 
 	# Download, check integrity, uncompress and patch the source from app.src
-	ynh_setup_source --dest_dir="$install_dir" --keep=".env storage"
+	ynh_setup_source --dest_dir="$install_dir" --keep="storage"
 fi
 
 chown -R $app:www-data "$install_dir"
@@ -63,6 +63,17 @@ ynh_add_fpm_config --phpversion=$phpversion --usage=$fpm_usage --footprint=$fpm_
 # Create a dedicated NGINX config
 ynh_add_nginx_config
 
+#=================================================
+# ADD A CONFIGURATION
+#=================================================
+ynh_script_progression --message="Adding a configuration file..." --weight=1
+
+# Setup application config
+ynh_add_config --template="../conf/.env.example" --destination="$install_dir/.env"
+
+chmod 644 "$install_dir/.env"
+chown $app:$app "$install_dir/.env"
+
 #=================================================
 # INSTALL 2FAUTH WITH COMPOSER
 #=================================================