From 35081818998f52bf852537e94a985ae03bdac9ff Mon Sep 17 00:00:00 2001
From: Daniel Kesselberg <mail@danielkesselberg.de>
Date: Sat, 2 Dec 2023 19:39:17 +0100
Subject: [PATCH] docs: add documentation for dns_pinning flag

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
---
 config/config.sample.php | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/config/config.sample.php b/config/config.sample.php
index a1f7332c4047b..fbe6cb3ca2adc 100644
--- a/config/config.sample.php
+++ b/config/config.sample.php
@@ -2405,4 +2405,14 @@
  * Defaults to ``false``
  */
 'unified_search.enabled' => false,
+
+/**
+ * DNS pinning is a security measure against DNS rebinding attacks.
+ *
+ * We recommend that you leave DNS pinning activated.
+ * Only deactivate it if you understand what you are doing.
+ *
+ * Defaults to ``true``
+ */
+'dns_pinning' => true,
 ];