diff --git a/config/config.sample.php b/config/config.sample.php
index bc1a179d03b..8f2372f45f3 100644
--- a/config/config.sample.php
+++ b/config/config.sample.php
@@ -303,6 +303,15 @@ $CONFIG = [
  */
 'auth.bruteforce.protection.enabled' => true,
 
+/**
+ * Whether the rate limit protection shipped with Nextcloud should be enabled or not.
+ *
+ * Disabling this is discouraged for security reasons.
+ *
+ * Defaults to ``true``
+ */
+'ratelimit.protection.enabled' => true,
+
 /**
  * Whether the authtoken v1 provider should be skipped
  *