diff --git a/config/config.sample.php b/config/config.sample.php
index cd6e35aee28..40c8691a655 100644
--- a/config/config.sample.php
+++ b/config/config.sample.php
@@ -303,6 +303,15 @@ $CONFIG = [
  */
 'auth.bruteforce.protection.enabled' => true,
 
+/**
+ * Whether the rate limit protection shipped with Nextcloud should be enabled or not.
+ *
+ * Disabling this is discouraged for security reasons.
+ *
+ * Defaults to ``true``
+ */
+'ratelimit.protection.enabled' => true,
+
 /**
  * By default WebAuthn is available but it can be explicitly disabled by admins
  */