diff --git a/custom/conf/app.example.ini b/custom/conf/app.example.ini
index 0aa8a1324b..913c0e7496 100644
--- a/custom/conf/app.example.ini
+++ b/custom/conf/app.example.ini
@@ -222,6 +222,9 @@ RUN_USER = ; git
 ;; Enable exposure of SSH clone URL to anonymous visitors, default is false
 ;SSH_EXPOSE_ANONYMOUS = false
 ;;
+;; Command template for authorized keys entries
+;SSH_AUTHORIZED_KEYS_COMMAND_TEMPLATE = {{.AppPath}} --config={{.CustomConf}} serv key-{{.Key.ID}}
+;;
 ;; Timeout for any write to ssh connections. (Set to -1 to disable all timeouts.)
 ;; Will default to the PER_WRITE_TIMEOUT.
 ;SSH_PER_WRITE_TIMEOUT = 30s
@@ -407,6 +410,9 @@ USER = root
 ;; Database connection max life time, default is 0 or 3s mysql (See #6804 & #7071 for reasoning)
 ;CONN_MAX_LIFETIME = 3s
 ;;
+;; Database connection max idle time, 0 prevents closing due to idle time.
+;CONN_MAX_IDLETIME = 0
+;;
 ;; Database maximum number of open connections, default is 100 which is the lowest default from Postgres (MariaDB + MySQL default to 151). Ensure you only increase the value if you configured your database server accordingly.
 ;MAX_OPEN_CONNS = 100
 ;;
@@ -443,9 +449,6 @@ INTERNAL_TOKEN =
 ;; How long to remember that a user is logged in before requiring relogin (in days)
 ;LOGIN_REMEMBER_DAYS = 31
 ;;
-;; Name of the cookie used to store the current username.
-;COOKIE_USERNAME = gitea_awesome
-;;
 ;; Name of cookie used to store authentication information.
 ;COOKIE_REMEMBER_NAME = gitea_incredible
 ;;
@@ -689,6 +692,12 @@ LEVEL = Info
 ;; Set the default branches range size
 ;BRANCHES_RANGE_SIZE = 20
 ;;
+;; Print out verbose infos on push to stdout
+;VERBOSE_PUSH = true
+;;
+;; Delay before verbose push infos are printed to stdout
+;VERBOSE_PUSH_DELAY = 5s
+;;
 ;; Arguments for command 'git gc', e.g. "--aggressive --auto"
 ;; see more on http://git-scm.com/docs/git-gc/
 ;GC_ARGS =
@@ -784,6 +793,11 @@ LEVEL = Info
 ;; Enable this to require captcha validation for login
 ;REQUIRE_CAPTCHA_FOR_LOGIN = false
 ;;
+;; Requires captcha for external registrations
+;REQUIRE_EXTERNAL_REGISTRATION_CAPTCHA = false
+;; Requires a password for external registrations
+;REQUIRE_EXTERNAL_REGISTRATION_PASSWORD = false
+;;
 ;; Type of captcha you want to use. Options: image, recaptcha, hcaptcha, mcaptcha, cfturnstile.
 ;CAPTCHA_TYPE = image
 ;;
@@ -953,7 +967,7 @@ LEVEL = Info
 ;;
 ;; Preferred Licenses to place at the top of the List
 ;; The name here must match the filename in options/license or custom/options/license
-;PREFERRED_LICENSES = Apache License 2.0,MIT License
+;PREFERRED_LICENSES = Apache-2.0,MIT
 ;;
 ;; Disable the ability to interact with repositories using the HTTP protocol
 ;DISABLE_HTTP_GIT = false
@@ -963,7 +977,7 @@ LEVEL = Info
 ;ACCESS_CONTROL_ALLOW_ORIGIN =
 ;;
 ;; Force ssh:// clone url instead of scp-style uri when default SSH port is used
-;USE_COMPAT_SSH_URI = false
+;USE_COMPAT_SSH_URI = true
 ;;
 ;; Value for the "go get" request returns the repository url as https or ssh, default is https
 ;GO_GET_CLONE_URL_PROTOCOL = https
@@ -1088,6 +1102,9 @@ LEVEL = Info
 ;; In default merge messages only include approvers who are official
 ;DEFAULT_MERGE_MESSAGE_OFFICIAL_APPROVERS_ONLY = true
 ;;
+;; If an squash commit's comment should be populated with the commit messages of the squashed commits
+;POPULATE_SQUASH_COMMENT_WITH_COMMIT_MESSAGES = false
+;;
 ;; Add co-authored-by and co-committed-by trailers if committer does not match author
 ;ADD_CO_COMMITTER_TRAILERS = true
 ;;
@@ -1103,7 +1120,7 @@ LEVEL = Info
 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
 ;; List of reasons why a Pull Request or Issue can be locked
-;LOCK_REASONS = Too heated,Off-topic,Resolved,Spam
+;LOCK_REASONS = Too heated,Off-topic,Spam,Resolved
 ;; Maximum number of pinned Issues per repo
 ;; Set to 0 to disable pinning Issues
 ;MAX_PINNED = 3
@@ -1219,6 +1236,12 @@ LEVEL = Info
 ;; Number of issues that are displayed on one page
 ;ISSUE_PAGING_NUM = 20
 ;;
+;; Number of repositories that are displayed on one page when searching.
+;REPO_SEARCH_PAGING_NUM = 20
+;;
+;; Number of members that are displayed on one page
+;MEMBERS_PAGING_NUM = 20
+;;
 ;; Number of maximum commits displayed in one activity feed
 ;FEED_MAX_COMMIT_NUM = 5
 ;;
@@ -1228,6 +1251,9 @@ LEVEL = Info
 ;; Number of items that are displayed in a single subsitemap
 ;SITEMAP_PAGING_NUM = 20
 ;;
+;; Number of packages that are displayed on one page
+;PACKAGES_PAGING_NUM = 20
+;;
 ;; Number of maximum commits displayed in commit graph.
 ;GRAPH_MAX_COMMIT_NUM = 100
 ;;
@@ -1244,9 +1270,14 @@ LEVEL = Info
 ;SHOW_USER_EMAIL = true
 ;;
 ;; Set the default theme for the Gitea install
-;DEFAULT_THEME = gitea-auto
+;DEFAULT_THEME = forgejo-auto
 ;;
 ;; All available themes. Allow users select personalized themes regardless of the value of `DEFAULT_THEME`.
+;; By default available:
+;;  - forgejo-auto, forgejo-light, forgejo-dark
+;;  - gitea-auto, gitea-light, gitea-dark
+;;  - forgejo-auto-deuteranopia-protanopia, forgejo-light-deuteranopia-protanopia, forgejo-dark-deuteranopia-protanopia
+;;  - forgejo-auto-tritanopia, forgejo-light-tritanopia, forgejo-dark-tritanopia
 ;THEMES = gitea-auto,gitea-light,gitea-dark
 ;;
 ;; All available reactions users can choose on issues/prs and comments.
@@ -1260,7 +1291,7 @@ LEVEL = Info
 ;; Additional Emojis not defined in the utf8 standard
 ;; By default we support gitea (:gitea:), to add more copy them to public/assets/img/emoji/emoji_name.png and add it to this config.
 ;; Dont mistake it for Reactions.
-;CUSTOM_EMOJIS = gitea, codeberg, gitlab, git, github, gogs
+;CUSTOM_EMOJIS = gitea, codeberg, gitlab, git, github, gogs, forgejo
 ;;
 ;; Whether the full name of the users should be shown where possible. If the full name isn't set, the username will be used.
 ;DEFAULT_SHOW_FULL_NAME = false
@@ -1445,6 +1476,11 @@ LEVEL = Info
 ;; A comma separated list of glob patterns to exclude from the index; ; default is empty
 ;REPO_INDEXER_EXCLUDE =
 ;;
+;; If vendored files should be excluded.
+;; See https://github.com/go-enry/go-enry for more details which files are considered to be vendored.
+;REPO_INDEXER_EXCLUDE_VENDORED = true
+;;
+;; The maximum filesize to include for indexing
 ;MAX_FILE_SIZE = 1048576
 
 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
@@ -1536,7 +1572,7 @@ LEVEL = Info
 ;;
 ;; Whether to allow registering via OpenID
 ;; Do not include to rely on rhw DISABLE_REGISTRATION setting
-;;ENABLE_OPENID_SIGNUP = true
+;ENABLE_OPENID_SIGNUP = true
 ;;
 ;; Allowed URI patterns (POSIX regexp).
 ;; Space separated.
@@ -1810,6 +1846,9 @@ LEVEL = Info
 ;; Session life time in seconds, default is 86400 (1 day)
 ;SESSION_LIFE_TIME = 86400
 ;;
+;; Cookie domain name. Default is empty
+;DOMAIN =
+;;
 ;; SameSite settings. Either "none", "lax", or "strict"
 ;SAME_SITE=lax
 
@@ -1862,7 +1901,7 @@ LEVEL = Info
 ;ENABLED = true
 ;;
 ;; Comma-separated list of allowed file extensions (`.zip`), mime types (`text/plain`) or wildcard type (`image/*`, `audio/*`, `video/*`). Empty value or `*/*` allows all types.
-;ALLOWED_TYPES = .csv,.docx,.fodg,.fodp,.fods,.fodt,.gif,.gz,.jpeg,.jpg,.log,.md,.mov,.mp4,.odf,.odg,.odp,.ods,.odt,.patch,.pdf,.png,.pptx,.svg,.tgz,.txt,.webm,.xls,.xlsx,.zip
+;ALLOWED_TYPES = .cpuprofile,.csv,.dmp,.docx,.fodg,.fodp,.fods,.fodt,.gif,.gz,.jpeg,.jpg,.json,.jsonc,.log,.md,.mov,.mp4,.odf,.odg,.odp,.ods,.odt,.patch,.pdf,.png,.pptx,.svg,.tgz,.txt,.webm,.xls,.xlsx,.zip
 ;;
 ;; Max size of each file. Defaults to 2048MB
 ;MAX_SIZE = 2048
@@ -1894,6 +1933,11 @@ LEVEL = Info
 ;; Minio bucket to store the attachments only available when STORAGE_TYPE is `minio`
 ;MINIO_BUCKET = gitea
 ;;
+;; Url lookup for the minio bucket only available when STORAGE_TYPE is `minio`
+;; Available values: auto, dns, path
+;; If empty, it behaves the same as "auto" was set
+;MINIO_BUCKET_LOOKUP = 
+;;
 ;; Minio location to create bucket only available when STORAGE_TYPE is `minio`
 ;MINIO_LOCATION = us-east-1
 ;;
@@ -2428,6 +2472,9 @@ LEVEL = Info
 ;; Allow private addresses defined by RFC 1918, RFC 1122, RFC 4632 and RFC 4291 (false by default)
 ;; If a domain is allowed by ALLOWED_DOMAINS, this option will be ignored.
 ;ALLOW_LOCALNETWORKS = false
+;;
+;; If set to true, completely ignores server certificate validation errors. This option is unsafe.
+;SKIP_TLS_VERIFY = false
 
 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
@@ -2595,6 +2642,11 @@ LEVEL = Info
 ;; Minio bucket to store the attachments only available when STORAGE_TYPE is `minio`
 ;MINIO_BUCKET = gitea
 ;;
+;; Url lookup for the minio bucket only available when STORAGE_TYPE is `minio`
+;; Available values: auto, dns, path
+;; If empty, it behaves the same as "auto" was set
+;MINIO_BUCKET_LOOKUP = 
+;;
 ;; Minio location to create bucket only available when STORAGE_TYPE is `minio`
 ;MINIO_LOCATION = us-east-1
 ;;
@@ -2637,3 +2689,13 @@ LEVEL = Info
 ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
 ;; storage type
 ;STORAGE_TYPE = local
+
+;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+;; settings for action artifacts, will override storage setting
+;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+;[storage.actions_artifacts]
+;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;
+;; storage type
+;STORAGE_TYPE = local