diff --git a/.env.sample b/.env.sample
index 16762e3..456473a 100644
--- a/.env.sample
+++ b/.env.sample
@@ -2,6 +2,9 @@ TYPE=wordpress
 TIMEOUT=300
 ENABLE_AUTO_UPDATE=true
 
+# Setup Wordpress settings on each deploy:
+#POST_DEPLOY_CMDS="app core_install"
+
 DOMAIN=wordpress.example.com
 ## Domain aliases
 #EXTRA_DOMAINS=', `www.wordpress.example.com`'
@@ -11,6 +14,11 @@ TITLE="My Example Blog"
 LOCALE="en_US" # de_DE
 ADMIN_EMAIL=admin@example.com
 
+# Every new user is per default subscriber, uncomment to change it
+#DEFAULT_USER_ROLE=administrator
+
+#WORDPRESS_DEBUG=true
+
 ## Additional extensions
 #PHP_EXTENSIONS="calendar"
 
diff --git a/abra.sh b/abra.sh
index 158c16e..9f514a7 100644
--- a/abra.sh
+++ b/abra.sh
@@ -9,7 +9,7 @@ wp() {
 
 core_install(){
     ADMIN=admin
-    if [ -n $AUTHENTIK_DOMAIN ]
+    if [ -n "$AUTHENTIK_DOMAIN" ]
     then
         ADMIN=akadmin
     fi
@@ -20,6 +20,12 @@ core_install(){
     wp "rewrite structure '/%year%/%monthnum%/%day%/%postname%/'"
     wp "plugin install --activate disable-update-notifications"
     wp 'option update dwcun_setting on' 
+    if [ -n "$DEFAULT_USER_ROLE" ]
+    then
+        wp "option set default_role $DEFAULT_USER_ROLE"
+    else
+        wp "option set default_role subscriber"
+    fi
     wp 'plugin auto-updates enable --all'
 }