From c8673d9577a27c5487f8b8a901c9e46081c82308 Mon Sep 17 00:00:00 2001
From: Aleksei Bavshin <a.bavshin@f5.com>
Date: Mon, 17 Nov 2025 14:13:21 -0800
Subject: [PATCH] Documented acme preferred_chain and profile directives.

---
 xml/en/docs/http/ngx_http_acme_module.xml | 42 ++++++++++++++++++++++-
 1 file changed, 41 insertions(+), 1 deletion(-)

diff --git a/xml/en/docs/http/ngx_http_acme_module.xml b/xml/en/docs/http/ngx_http_acme_module.xml
index 3ca817fc..11af4484 100644
--- a/xml/en/docs/http/ngx_http_acme_module.xml
+++ b/xml/en/docs/http/ngx_http_acme_module.xml
@@ -9,7 +9,7 @@
 <module name="Module ngx_http_acme_module"
         link="/en/docs/http/ngx_http_acme_module.html"
         lang="en"
-        rev="2">
+        rev="3">
 
 <section id="summary">
 
@@ -227,6 +227,46 @@ base64url</link>.
 </directive>
 
 
+<directive name="preferred_chain">
+<syntax><value>name</value></syntax>
+<default />
+<context>acme_issuer</context>
+<appeared-in>0.3.0</appeared-in>
+
+<para>
+Specifies the preferred certificate chain.
+</para>
+
+<para>
+If the ACME server offers multiple certificate chains,
+prefer the chain with the topmost certificate issued from the
+Subject Common Name <value>name</value>.
+If there are no matches, the default chain will be used.
+</para>
+
+</directive>
+
+
+<directive name="profile">
+<syntax><value>name</value> [<literal>require</literal>]</syntax>
+<default />
+<context>acme_issuer</context>
+<appeared-in>0.3.0</appeared-in>
+
+<para>
+Requests the
+<link url="https://datatracker.ietf.org/doc/html/draft-ietf-acme-profiles">
+certificate profile</link> <value>name</value> from the ACME server.
+</para>
+
+<para>
+The <literal>require</literal> parameter will cause certificate renewals
+to fail if the server does not support the specified profile.
+</para>
+
+</directive>
+
+
 <directive name="ssl_trusted_certificate">
 <syntax><value>file</value></syntax>
 <default/>