From 3764c7509878c6e5b106c76c2c70bd1f9996caf5 Mon Sep 17 00:00:00 2001
From: Simon Ser <contact@emersion.fr>
Date: Wed, 17 Feb 2021 18:43:36 +0100
Subject: [PATCH] Expand on_demand docs

---
 tlstunnel.1.scd | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/tlstunnel.1.scd b/tlstunnel.1.scd
index 5910e4a..7f35fcf 100644
--- a/tlstunnel.1.scd
+++ b/tlstunnel.1.scd
@@ -98,6 +98,12 @@ The following directives are supported:
 	*on_demand*
 		Enable on-demand TLS.
 
+		When enabled, a TLS handshake may trigger maintenance for the relevant
+		certificate. If no existing certificate is available, a new certificate
+		is obtained and the connection is blocked until it's available. If an
+		existing certificate is available, the certificate is renewed in the
+		background if necessary.
+
 # FILES
 
 _/etc/tlstunnel/config_