Update .env.template

.env.template

@@ -1,28 +1,28 @@
-# ============================================================
+# =============================
-#  Solphyr Arch Linux Installer Configuration
+# Arch Secure Install Template
-# ============================================================
+# =============================
 
-# --- System ---
+DISK=/dev/nvme0n1
-HOSTNAME="solphyr-dev"
+HOSTNAME=elysium
-USERNAME="solphyr"
+USERNAME=solphyr
-KEYMAP="uk"
+USER_PASSWORD=changeme
-TIMEZONE="Europe/London"
+ROOT_PASSWORD=changeme
-LOCALE="en_GB.UTF-8"
 
-# --- Disk ---
+TIMEZONE=Europe/London
-DISK=""           # e.g. /dev/nvme0n1 (leave blank for interactive)
+LOCALE=en_GB.UTF-8
+KEYMAP=uk
 
-# --- Network ---
+LUKS_NAME=cryptroot
-WIFI_SSID=""
+LUKS_PASSPHRASE=changeme
-WIFI_PASS=""
 
-# --- Passwords (leave blank for secure prompt) ---
+SECUREBOOT_ENABLE=true
-LUKS_PASSWORD=""
+SECUREBOOT_KEY_DIR=/etc/secureboot
-USER_PASSWORD=""
+TPM2_ENABLE=true
-ROOT_PASSWORD=""
 
-# --- Optional Components ---
+BTRFS_SUBVOLS=(@ @home @log @cache)
-INSTALL_YAY="yes"             # Install yay AUR helper
+BTRFS_OPTS="compress=zstd,noatime,ssd,space_cache=v2"
-ENABLE_WIREGUARD="yes"        # Install WireGuard if wg0.conf present
+
-WIREGUARD_CONF_PATH="./wg0.conf"
+NETWORK_DHCP=true
-ENABLE_HARDENING="yes"        # Apply UFW/sysctl/AppArmor/Fail2ban baseline
+NETWORK_INTERFACE=auto
+
+AUTO_MODE=false