diff --git a/config/config.sample.php b/config/config.sample.php
index cb9e5b0f5a6..a5214479338 100644
--- a/config/config.sample.php
+++ b/config/config.sample.php
@@ -314,6 +314,15 @@ $CONFIG = [
  */
 'auth.bruteforce.protection.enabled' => true,
 
+/**
+ * Whether the rate limit protection shipped with Nextcloud should be enabled or not.
+ *
+ * Disabling this is discouraged for security reasons.
+ *
+ * Defaults to ``true``
+ */
+'ratelimit.protection.enabled' => true,
+
 /**
  * By default WebAuthn is available but it can be explicitly disabled by admins
  */