diff --git a/configs/autopush_shared.ini.sample b/configs/autopush_shared.ini.sample
index eabf4d13..e67be0c3 100644
--- a/configs/autopush_shared.ini.sample
+++ b/configs/autopush_shared.ini.sample
@@ -9,6 +9,9 @@
 ; used.
 #ssl_key =
 #ssl_cert =
+; Path to file containing any additional parameters for the Ephemeral
+; Diffie-Hellman
+#ssl_dh_param =
 
 ; The push endpoint token encryption keys. Must be 32-byte, URL-safe
 ; Base64 encoded strings. Keys can be generated by running
@@ -33,14 +36,6 @@ crypto_key = []
 ; Uncomment to resolve the local IP address into a hostname if possible.
 #resolve_hostname
 
-; If this host is terminating SSL/TLS connections, you will need to provide
-; the appropriate certificates and keys. These are file paths.
-#ssl_key =
-#ssl_cert =
-; Path to file containing any additional parameters for the Ephemeral
-; Diffie-Hellman
-#ssl_dh_param =
-
 ; Datadog credentials. If a Datadog API key is specified, the statsd
 ; options will be ignored. Datadog is not required to run this server.
 #datadog_api_key =