diff --git a/base/ingress/pingora-config.yaml b/base/ingress/pingora-config.yaml
index c343c4b..cc65c09 100644
--- a/base/ingress/pingora-config.yaml
+++ b/base/ingress/pingora-config.yaml
@@ -28,6 +28,14 @@ data:
     # The prefix is the subdomain before the first dot, so these routes work
     # identically for yourdomain.com and *.sslip.io.
     # Edit to match your own service names and namespaces.
+    #
+    # Per-route options:
+    #   host_prefix  — subdomain to match (required)
+    #   backend      — upstream URL, e.g. "http://svc.ns.svc.cluster.local:8000" (required)
+    #   websocket    — proxy WebSocket upgrades (default: false)
+    #   disable_secure_redirection — when true, plain-HTTP requests are forwarded
+    #                  as-is instead of being 301-redirected to HTTPS.
+    #                  Default: false (all HTTP → HTTPS redirect enforced).
 
     [[routes]]
     host_prefix = "docs"