Basic implementation for private key rollover (#294)

[andy/dehydrated.git] / docs / examples / config

diff --git a/docs/examples/config b/docs/examples/config
index 17621d2aa1b2ce52e16c31d9b591e1e1bf46da7c..92b2b83be3d8d3757d4b1a981754d87ded3d277c 100644 (file)
--- a/docs/examples/config
+++ b/docs/examples/config
@@ -72,6 +72,9 @@
 # Regenerate private keys instead of just signing new certificates on renewal (default: yes)
 #PRIVATE_KEY_RENEW="yes"
 
+# Create an extra private key for rollover (default: no)
+#PRIVATE_KEY_ROLLOVER="no"
+
 # Which public key algorithm should be used? Supported: rsa, prime256v1 and secp384r1
 #KEY_ALGO=rsa