diff --git a/README.rst b/README.rst
index 3e19f0a2..21629de9 100644
--- a/README.rst
+++ b/README.rst
@@ -61,6 +61,9 @@ settings:
    health-check information for haproxy.
 -  *connect\_address*: ip address + port through which restapi is
    accessible.
+-  *certfile*: Specifies a file with the certificate in the PEM format.
+   If certfile is not specified or empty API server will work without SSL.
+-  *keyfile*: Specifies a file with the secret key in the PEM format.
 
 -  *etcd*
 -  *scope*: the relative path used on etcd's http api for this
diff --git a/postgres0.yml b/postgres0.yml
index 659a4db2..7c086d7d 100644
--- a/postgres0.yml
+++ b/postgres0.yml
@@ -4,6 +4,8 @@ scope: &scope batman
 restapi:
   listen: 127.0.0.1:8008
   connect_address: 127.0.0.1:8008
+#  certfile: /etc/ssl/certs/ssl-cert-snakeoil.pem
+#  keyfile: /etc/ssl/private/ssl-cert-snakeoil.key
 etcd:
   scope: *scope
   ttl: *ttl
diff --git a/postgres1.yml b/postgres1.yml
index bc8b6fd1..988a74f6 100644
--- a/postgres1.yml
+++ b/postgres1.yml
@@ -4,6 +4,8 @@ scope: &scope batman
 restapi:
   listen: 127.0.0.1:8009
   connect_address: 127.0.0.1:8009
+#  certfile: /etc/ssl/certs/ssl-cert-snakeoil.pem
+#  keyfile: /etc/ssl/private/ssl-cert-snakeoil.key
 etcd:
   scope: *scope
   ttl: *ttl