diff --git a/rippled-example.cfg b/rippled-example.cfg
index ef45147b7..8bd553b9c 100644
--- a/rippled-example.cfg
+++ b/rippled-example.cfg
@@ -157,9 +157,10 @@
 #   connections.
 #
 # [websocket_public_secure]
-#   0 or 1.
+#   0, 1 or 2.
 #   0: Provide ws service for websocket_public_ip/websocket_public_port.
-#   1: Provide wss service for websocket_public_ip/websocket_public_port. [default]
+#   1: Provide both ws and wss service for websocket_public_ip/websocket_public_port. [default]
+#   2: Provide wss service only for websocket_public_ip/websocket_public_port.
 #
 #   Browser pages like the Ripple client will not be able to connect to a secure
 #   websocket connection if a self-signed certificate is used.  As the Ripple
@@ -177,9 +178,10 @@
 #   Port to bind to allow trusted ADMIN connections from backend applications.
 #
 # [websocket_secure]
-#   0 or 1.
-#   0: Provide ws service for websocket_ip/websocket_port. [default]
-#   1: Provide wss service for websocket_ip/websocket_port.
+#   0, 1, or 2.
+#   0: Provide ws service only for websocket_ip/websocket_port. [default]
+#   1: Provide ws and wss service for websocket_ip/websocket_port
+#   2: Provide wss service for websocket_ip/websocket_port.
 #
 # [websocket_ssl_key]:
 #   Specify the filename holding the SSL key in PEM format.