diff --git a/config.yml b/config.yml
index 7f49f3e..f40386c 100644
--- a/config.yml
+++ b/config.yml
@@ -1,38 +1,51 @@
 # wg-portal Konfiguration für Pfannkuchen VPS
 # Docs: https://wgportal.org/master/documentation/overview/
-# Credentials kommen aus sops-entschlüsselter .env
 
 advanced:
   log_level: info
-  # config_storage_path: ""  # DEAKTIVIERT – wg0.conf wird manuell verwaltet!
+  config_storage_path: /etc/wireguard  # AKTIV – wg0.conf wird von wg-portal verwaltet
   startup_import_peers: []
   startup_create_unknown_peers: false
   startup_create_default_peer: false
   restore_state: true
 
 core:
-  admin_user: ${WG_PORTAL_ADMIN_USER}
-  admin_password: ${WG_PORTAL_ADMIN_PASSWORD}
-  editable_keys: true
-  import_existing: true
-  restore_state: true
-  create_default_peer_on_login: false
-  create_default_peer_on_user_creation: false
+  admin_user: sascha@sascha-lutz.de
+  admin_password: bjzpPsuuRIV9pEBmrULjzHv6PbXQCEOUI5HfPvRTXZw
+  ldap_skip_cert_check: false
+  create_default_peer: false
   self_provisioning_allowed: false
 
 database:
   type: sqlite
-  dsn: "/app/data/wg_portal.db"
+  dsn: wg_portal.db
 
-web:
-  external_url: "https://vpn.sascha-lutz.de"
-  request_logging: true
-  listening_address: ":8888"
+mail:
+  enabled: false
 
 statistics:
-  use_ping_checks: false
-  collect_interface_data: true
-  collect_peer_data: true
+  enabled: true
 
-backend:
-  default: local
+webhooks:
+  enabled: false
+
+web:
+  external_url: https://vpn.sascha-lutz.de
+  site_title: Pfannkuchen WG Portal
+  company_name: Homelab Pfannkuchen
+  site_company_link: https://status.guck.tv
+  request_ip:
+    enabled: true
+    header: Cf-Connecting-Ip
+  editable_keys: true
+  session_identifier: session_token
+  listening_address: :8888
+  site_brand: |-
+    WireGuard® is a registered trademark of Jason A. Donenfeld.
+
+  core:
+    import_existing: true
+    sort_peers: true
+    restore_state: true
+    enable_disable_peers: false
+    ui_ping_enabled: true
\ No newline at end of file