diff --git a/conf/.env b/conf/.env
index 013c24f..fa36513 100644
--- a/conf/.env
+++ b/conf/.env
@@ -1,19 +1,85 @@
 MIX_ENV=prod
 FLAVOUR=classic
-HOSTNAME=__DOMAIN__
 
+WITH_DOCKER=no
+
+## OTHER CONFIG ##
+# server domain name:
+HOSTNAME=__DOMAIN__
+# server port:
+SERVER_PORT=__PORT__
+# port your visitors will access (typically 80 or 443, will be different than SERVER_PORT only if using a reverse proxy)
+PUBLIC_PORT=443
+# what service to use for sending out emails (eg. smtp, mailgun, none) NOTE: you should also set the corresponding keys in secrets section
+MAIL_BACKEND=sendmail
+# hostname and port of meili search index
+SEARCH_MEILI_INSTANCE=http://localhost:7700
+# require an email address to be invited before being able to sign up
+INVITE_ONLY=true
+
+# uncomment in order to NOT automatically change the database schema when you upgrade the app
+# DISABLE_DB_AUTOMIGRATION=true
+# max file upload size (default is 20 meg)
+UPLOAD_LIMIT=MEDIA_UPLOAD_SIZE
+# ====================================
+# You should not have to edit any of the following ones:
+POSTGRES_HOST=localhost
+LANG=en_US.UTF-8
+LANGUAGE=en_US.UTF-8
+REPLACE_OS_VARS=true
+LIVEVIEW_ENABLED=true
+POSTGRES_USER=postgres
+POSTGRES_DB=bonfire_db
+ACME_AGREE=true
+SHOW_DEBUG_IN_DEV=true
+# PLUG_SERVER=bandit
+## SECRETS ##
+# make sure you change everything to your own secrets!
+# and do not check this into git or any public host
+
+# for sessions/cookies, you can generate strings for these by running: just secrets
 SECRET_KEY_BASE=__SECRET_KEY_BASE__
 SIGNING_SALT=__SIGNING_SALT__
 ENCRYPTION_SALT=__ENCRYPTION_SALT__
 
-SERVER_PORT=__PORT__
-PUBLIC_PORT=443
+# database access
+POSTGRES_PASSWORD=put_a_secure_db_pw_here
+
+# password for the search index
+MEILI_MASTER_KEY=put-a-key-to-protect-the-search-index-here
+
+## TODO
+# email deliverym if you use mailgun.com, edit with your domain and API key
+MAIL_DOMAIN=__DOMAIN__
+MAIL_USERNAME=__APP__
+MAIL_KEY=__MAIL_PWD__
+MAIL_FROM=__APP__@__DOMAIN__
 
 # TODO : Configure S3 - with proper Yunohost question during installation
-#UPLOADS_S3_BUCKET=
-#UPLOADS_S3_ACCESS_KEY_ID=
-#UPLOADS_S3_SECRET_ACCESS_KEY=
+# Uploads
+# UPLOADS_S3_BUCKET=
+# UPLOADS_S3_ACCESS_KEY_ID=
+# UPLOADS_S3_SECRET_ACCESS_KEY=
 
-UPLOAD_LIMIT=MEDIA_UPLOAD_SIZE
+# telemetry API keys
+# SENTRY_DSN=
+OTEL_ENABLED=0
+# OTEL_HONEYCOMB_API_KEY=
+# OTEL_LIGHTSEP_API_KEY=
 
-WITH_DOCKER=no
+# default admin user if you generate seed data
+SEEDS_USER=root
+
+# backend stuff
+ERLANG_COOKIE=bonfire_cookie
+
+# Bonfire extensions configs
+WEB_PUSH_SUBJECT=mailto:__APP__@__DOMAIN__
+WEB_PUSH_PUBLIC_KEY=
+WEB_PUSH_PRIVATE_KEY=
+GEOLOCATE_OPENCAGEDATA=
+MAPBOX_API_KEY=pk.eyJ1IjoibWF5ZWwiLCJhIjoiY2tlMmxzNXF5MGFpaDJ0bzR2M29id2EzOCJ9.QsmjD-zypsE0_wonLGCYlA
+GITHUB_TOKEN=
+TX_TOKEN=
+
+## END OF SECRETS ##