diff --git a/README.md b/README.md
index 0c4d690..46f476d 100644
--- a/README.md
+++ b/README.md
@@ -7,7 +7,9 @@ This role installs phpMyAdmin.
 
 | Name | Note | Default |
 |--|--|--|
-| `phpmyadmin_user` | System user to create | `pma`
+| `phpmyadmin_user` | System user to create | `pma` |
+| `phpmyadmin_blowfish_secret` | 32 bytes long plain-text password for cookie encryption | |
+| `phpmyadmin_tmp` | Tmp directory | `/tmp` |
 | `phpmyadmin_hosts` | Array with hosts to connect to | *optional* |
 | `phpmyadmin_hosts.name` | Hostname of database host | * optional* |
 | `phpmyadmin_host.address` | IP address of database host | *optional* |
diff --git a/defaults/main.yml b/defaults/main.yml
index 5a684f9..0f72e0b 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -1,2 +1,3 @@
 ---
 phpmyadmin_user: pma
+phpmyadmin_tmp: /tmp
diff --git a/templates/pma.php.j2 b/templates/pma.php.j2
index 0e32f6f..9bade2c 100644
--- a/templates/pma.php.j2
+++ b/templates/pma.php.j2
@@ -2,6 +2,8 @@
 
 <?php
 $cfg['ForceSSL'] = true;
+$cfg['blowfish_secret'] = '{{ phpmyadmin_blowfish_secret }}';
+$cfg['TempDir'] = '{{ phpmyadmin_tmp }}';
 
 {% if phpmyadmin_hosts is defined %}
 $i = 0;