diff --git a/README.md b/README.md
index 20ae8845b5d95b8a7b4175b252f068c4d0ca8d00..960293ed792ee24f4a9ee05ab9981298750ab404 100644
--- a/README.md
+++ b/README.md
@@ -130,12 +130,12 @@ If servers are configured, the generated configuration files end with `.conf` an
     - `path`: path under this domain to redirect the hostnames to
     - `hostnames`: list of hostnames to redirect to this domain
 * `no_ssl`: if `yes`, the proxy listens to HTTP, not HTTPS
-* `certificate`: path to the TLS certificate file (required for HTTPS)
-* `private_key`: path to the TLS private key file (required for HTTPS)
+* `certificate`: path to the TLS certificate file (defaults to acmetool path)
+* `private_key`: path to the TLS private key file (defaults to acmetool path)
 * `cipher_strength`: `modern` or `intermediate` (cf. `vars/main.yml`, optional)
 * `use_sso`: include single sign on for this server
 * `sso_protect_all`: if `no`, proxy locations do not automatically require single sign on auth if `use_sso` is set (default `yes`, optional)
-* `include_acme`: if `yes`, the acmetool snippet is included (optional)
+* `include_acme`: if `no`, the acmetool snippet is not included (optional)
 * `include_snippets`: list of snippets files (in `/etc/nginx/snippets/`) to include (optional)
 * `internal_locations`: list of internal locations
   - *required* to generate internal config (empty list != omitted)