diff --git a/packaging/rustbox.toml b/packaging/rustbox.toml
index 097c764..b1f7608 100644
--- a/packaging/rustbox.toml
+++ b/packaging/rustbox.toml
@@ -1,4 +1,4 @@
-# RustBox 0.2.0 - packaged production configuration (DEB/RPM)
+# RustBox 0.2.3 - packaged production configuration (DEB/RPM)
 #
 # This file contains all supported RustBox configuration options.
 # Commented options are optional and do not change the packaged defaults.
@@ -35,6 +35,13 @@ default_theme = "system"
 # and Roundcube variants.
 default_interface_skin = "apple-mail"
 
+# Optional product features. Disabled features are removed from the API/UI.
+sieve_enabled = true
+diagnostics_enabled = true
+about_enabled = true
+# Browser-facing CSP/frame/referrer/permissions headers. Off by default for compatibility.
+security_headers_enabled = false
+
 
 # -----------------------------------------------------------------------------
 # Database
@@ -87,10 +94,10 @@ remember_me_days = 30
 #
 # session_encryption_key = "BASE64_32_BYTE_KEY"
 
-# Direct Redis:
+# Direct Redis/Valkey:
 # redis_url = "redis://redis.example.com:6379/"
 
-# Redis Sentinel:
+# Redis Sentinel (or a compatible Redis deployment):
 # redis_sentinel_nodes = [
 #   "sentinel-a:26379",
 #   "sentinel-b:26379",
@@ -248,7 +255,7 @@ retry_timeout_secs = 60
 # bucket = "rustbox"
 # region = "eu-central-1"
 #
-# Custom endpoint for MinIO, SILO, Ceph RGW, OpenStack Swift s3api, etc.
+# Custom endpoint for Garage, MinIO, SILO, Ceph RGW, OpenStack Swift s3api, etc.
 # AWS S3 normally does not require endpoint.
 #
 # endpoint = "https://s3.example.net"
@@ -265,6 +272,7 @@ retry_timeout_secs = 60
 #
 # access_key_id = "..."
 # secret_access_key = "..."
+# session_token = "..."
 #
 # Server-side encryption:
 #
@@ -405,13 +413,13 @@ worker_max_attempts = 12
 
 
 # -----------------------------------------------------------------------------
-# Cluster sessions using Redis
+# Cluster sessions using Redis/Valkey
 # -----------------------------------------------------------------------------
 #
 # session_backend = "redis"
 # session_encryption_key = "BASE64_32_BYTE_KEY"
 #
-# redis_url = "redis://redis.internal:6379/"
+# redis_url = "redis://valkey.internal:6379/"
 #
 # Or Sentinel:
 #