--- a/mod_net_proxy/README.md	Thu Nov 06 15:25:19 2025 +0100
+++ b/mod_net_proxy/README.md	Fri Nov 14 02:06:22 2025 -0400
@@ -24,6 +24,7 @@
 or within
 [the official protocol specifications.](https://www.haproxy.org/download/1.8/doc/proxy-protocol.txt)
 
+It also allows to set an outgoing (s2s) proxy, and optionally mark any of these connections secure.
 
 Usage
 =====
@@ -64,6 +65,29 @@
 
   Example: proxy_ports = { 15222, 15269 }
 ]]--
+
+-- make all outgoing s2s connections directly to here instead
+proxy_out = { "192.168.10.1", 15270 }
+
+--[[
+  Mark incoming/outgoing connections from/to proxy as secure.
+  This is just shorthand to override `proxy_secure_in` and `proxy_secure_out` below.
+]]--
+proxy_secure = true
+
+--[[
+  Mark incoming connections from proxy as secure.
+  The proxy must guarantee this by requiring encryption and properly validating
+  incoming s2s certs.
+]]--
+proxy_secure_in = true
+
+--[[
+  Mark outgoing connections to proxy as secure.
+  The proxy must guarantee this by requiring encryption, and sending client cert
+  for s2s connections.
+]]--
+proxy_secure_out = true
 ```
 
 The above example configuration, which needs to be placed in the global section,
@@ -173,6 +197,7 @@
 
   ----- -----
   trunk Works
+  13    Works
   0.12  Works
   0.11  Works
   0.10  Works