diff --git a/doc/ircd.conf.example b/doc/ircd.conf.example
index f45aa4dc..e8e46cf2 100644
--- a/doc/ircd.conf.example
+++ b/doc/ircd.conf.example
@@ -346,6 +346,10 @@ shared {
 	flags = all, rehash;
 };
 
+secure {
+	ip = "127.0.0.1";
+};
+
 /* exempt {}: IPs that are exempt from Dlines and rejectcache. (OLD d:) */
 exempt {
 	ip = "127.0.0.1";
diff --git a/doc/reference.conf b/doc/reference.conf
index 281aa3ea..a1d62fbd 100644
--- a/doc/reference.conf
+++ b/doc/reference.conf
@@ -740,6 +740,12 @@ exempt {
 	ip = "127.0.0.1";
 };
 
+/* secure {}: IPs that are considered to be secure networks, and get
+ * +Z without using TLS */
+secure {
+	ip = "127.0.0.1";
+};
+
 /* The channel block contains options pertaining to channels */
 channel {
 	/* invex: Enable/disable channel mode +I, a n!u@h list of masks