diff --git a/ffsync-template.xml b/ffsync-template.xml
index 029f368..92f0a52 100644
--- a/ffsync-template.xml
+++ b/ffsync-template.xml
@@ -74,15 +74,21 @@
       <Name>SYNCSERVER_FORCE_WSGI_ENVIRON</Name>
       <Mode/>
     </Variable>
+     <Variable>
+      <Value>false</Value>
+      <Name>SYNCSERVER_DEBUG_ENABLED</Name>
+      <Mode/>
+    </Variable>   
   </Environment>
   <Labels/>
   <Config Name="sync db location" Target="/data" Default="/mnt/user/appdata/ff-syncserver/db/" Mode="rw" Description="Location where durable sqllite db is stored for sync data." Type="Path" Display="always" Required="true" Mask="false"></Config>
   <Config Name="Syncserver Public URL" Target="SYNCSERVER_PUBLIC_URL" Default="http://&amp;lt;URL&amp;gt;:5000" Mode="" Description="Replace &amp;lt;URL&amp;gt; in SYNCSERVER_PUBLIC_URL with your URL (For which the SSL certificate was also issued) " Type="Variable" Display="always" Required="true" Mask="false"></Config>
   <Config Name="Syncserver secret" Target="SYNCSERVER_SECRET" Default="&amp;lt;KEY&amp;gt;" Mode="" Description="Replace &amp;lt;KEY&amp;gt; with some random hex like the output of &#13;&#10;&#13;&#10;head -c 20 /dev/urandom | sha1sum | awk '{print $1}'." Type="Variable" Display="always" Required="true" Mask="true"></Config>
   <Config Name="SQLlite URI" Target="SYNCSERVER_SQLURI" Default="sqlite:////data/syncserver.db" Mode="" Description="Container path to where sqllite db lives" Type="Variable" Display="always-hide" Required="false" Mask="false">sqlite:////data/syncserver.db</Config>
-  <Config Name="Allow new users" Target="SYNCSERVER_ALLOW_NEW_USERS" Default="true" Mode="" Description="Container Variable: SYNCSERVER_ALLOW_NEW_USERS" Type="Variable" Display="always" Required="true" Mask="false"></Config>
+  <Config Name="Allow new users" Target="SYNCSERVER_ALLOW_NEW_USERS" Default="true" Mode="" Description="Container Variable: SYNCSERVER_ALLOW_NEW_USERS. Should be disabled for enhanced security if not needed!!!" Type="Variable" Display="always" Required="true" Mask="false"></Config>
   <Config Name="Port" Target="PORT" Default="5000" Mode="" Description="Container Variable: PORT" Type="Variable" Display="always" Required="false" Mask="false">5000</Config>
   <Config Name="Listening on" Target="5000" Default="5000" Mode="tcp" Description="Container Port: 5000" Type="Port" Display="always" Required="true" Mask="false">5000</Config>
   <Config Name="Enable batch uploads" Target="SYNCSERVER_BATCH_UPLOAD_ENABLED" Default="true" Mode="" Description="Container Variable: SYNCSERVER_BATCH_UPLOAD_ENABLED" Type="Variable" Display="advanced" Required="false" Mask="false">true</Config>
   <Config Name="Force WSGI" Target="SYNCSERVER_FORCE_WSGI_ENVIRON" Default="true" Mode="" Description="Container Variable: SYNCSERVER_FORCE_WSGI_ENVIRON" Type="Variable" Display="advanced" Required="false" Mask="false">false</Config>
+  <Config Name="DEBUG" Target="SYNCSERVER_DEBUG_ENABLED" Default="false" Mode="" Description="Container Variable: SYNCSERVER_DEBUG_ENABLED" Type="Variable" Display="advanced" Required="false" Mask="false">false</Config>
 </Container>