diff --git a/rootfs/tmp/etc/gitea/app.ini b/rootfs/tmp/etc/gitea/app.ini
index 0320015..9f8a9f4 100644
--- a/rootfs/tmp/etc/gitea/app.ini
+++ b/rootfs/tmp/etc/gitea/app.ini
@@ -15,7 +15,7 @@ LFS_JWT_SECRET                                             = REPLACE_GITEA_LFS_J
 LANDING_PAGE                                               = explore
 ACME_URL                                                   =
 ACME_ACCEPTTOS                                             = true
-ACME_EMAIL                                                 = REPLACE_SERVER_ADMIN
+ACME_EMAIL                                                 = ssl-admin@REPLACE_SERVER_NAME
 ACME_DIRECTORY                                             = REPLACE_DATA_DIR/certs
 LETSENCRYPT_ACCEPTTOS                                      = true
 DISABLE_SSH                                                = false
@@ -133,7 +133,7 @@ INTERNAL_TOKEN                                             = REPLACE_GITEA_INTER
 PASSWORD_HASH_ALGO                                         = pbkdf2
 MIN_PASSWORD_LENGTH                                        = 8
 PASSWORD_COMPLEXITY                                        = on
-LOGIN_REMEMBER_DAYS                                        = 365
+LOGIN_REMEMBER_DAYS                                        = 1825
 COOKIE_USERNAME                                            = git_REPLACE_RANDOM_COOKIE_KEY
 REVERSE_PROXY_LIMIT                                        = 1
 REVERSE_PROXY_TRUSTED_PROXIES                              = *
@@ -152,7 +152,7 @@ REGISTER_EMAIL_CONFIRM                                     = REPLACE_GITEA_EMAIL
 ENABLE_NOTIFY_MAIL                                         = REPLACE_GITEA_EMAIL_CONFIRM
 ALLOW_ONLY_EXTERNAL_REGISTRATION                           = false
 ENABLE_CAPTCHA                                             = true
-DEFAULT_KEEP_EMAIL_PRIVATE                                 = false
+DEFAULT_KEEP_EMAIL_PRIVATE                                 = true
 DEFAULT_ALLOW_CREATE_ORGANIZATION                          = true
 DEFAULT_ENABLE_TIMETRACKING                                = true
 NO_REPLY_ADDRESS                                           = no-reply.REPLACE_SERVER_NAME