diff --git a/.env.template b/.env.template
index 298eea8..8398a03 100644
--- a/.env.template
+++ b/.env.template
@@ -16,10 +16,19 @@ WEBSOCKET_ENABLED=true
 LOG_LEVEL=warn
  
 # SMTP (optional – Rauten entfernen zum Aktivieren)
-#SMTP_HOST=smtp.example.com
-#SMTP_FROM=vaultwarden@ljh31.de
-#SMTP_PORT=587
-#SMTP_SECURITY=starttls
-#SMTP_USERNAME=user
-#SMTP_PASSWORD=passwort
+SMTP_HOST=mxf923.netcup.net
+SMTP_FROM=vault@ljh31.de
+SMTP_PORT=465
+SMTP_SECURITY=starttls
+SMTP_USERNAME=user
+SMTP_PASSWORD=passwort
+
+# SSO / Keycloak
+SSO_ENABLED=true
+SSO_ONLY=false                         # false = Login auch noch ohne SSO möglich
+SSO_PKCE=true
+SSO_AUTHORITY=https://iam.ljh31.de/realms/family
+SSO_CLIENT_ID=vaultwarden
+SSO_CLIENT_SECRET=dein-client-secret
+SSO_SCOPES=profile email offline_access