--- a/hitch.conf.man.rst
+++ b/hitch.conf.man.rst
@@ -531,17 +531,13 @@ The following file shows the syntax need
         port = "443"
     }
     backend = "[127.0.0.1]:6086"    # 6086 is the default Varnish PROXY port.
-    workers = 4                     # number of CPU cores
-
-    daemon = on
-
-    # We strongly recommend you create a separate non-privileged hitch
-    # user and group
-    user = "hitch"
-    group = "hitch"
+    workers = auto                  # number of CPU cores
 
     # Enable to let clients negotiate HTTP/2 with ALPN. (default off)
-    # alpn-protos = "h2, http/1.1"
+    alpn-protos = "h2, http/1.1"
+
+    # Load the TLS certificates+keys from *.pem files in this directory.
+    pem-dir = "/etc/hitch/cert.d"
 
     # run Varnish as backend over PROXY; varnishd -a :80 -a localhost:6086,PROXY ..
     write-proxy-v2 = on             # Write PROXY header
