diff --git a/fleet-server.reference.yml b/fleet-server.reference.yml
index 67507739ba..34f1565912 100644
--- a/fleet-server.reference.yml
+++ b/fleet-server.reference.yml
@@ -101,6 +101,11 @@ fleet:
 #        certificate: /creds/cert.pem
 #        key: /creds/key.pem
 #        key_passphrase_path: /creds/key.pem
+#        certificate_reload:
+#          enabled: false    # Disabled by default; set to true to enable periodic reload
+#          reload_interval: 5s  # How often to re-read cert/key files from disk.
+#                               # After rotation, new certs are picked up within
+#                               # this interval on the next TLS handshake.
 #
 #     # timeouts controls various api timeouts
 #     timeouts: