@@ -92,7 +92,10 @@ An example [oauth2-proxy.cfg](https://github.com/oauth2-proxy/oauth2-proxy/blob/
9292| `--provider-display-name` | string | Override the provider's name with the given string; used for the sign-in page | (depends on provider) |
9393| `--ping-path` | string | the ping endpoint that can be used for basic health checks | `"/ping"` |
9494| `--ping-user-agent` | string | a User-Agent that can be used for basic health checks | `""` (don't check user agent) |
95−| `--metrics-address` | string | the address prometheus metrics will be scraped from | `""` |
95+| `--metrics-address` | string | the address /metrics will be served on | `""` |
96+| `--metrics-secure-address` | string | the address /metrics will be served on via HTTPS | `""` |
97+| `--metrics-tls-cert-file` | string | path to certificate file for secure metrics server | `""` |
98+| `--metrics-tls-key-file` | string | path to private key file for secure metrics server | `""` |
9699| `--proxy-prefix` | string | the url root path that this proxy should be nested under (e.g. /`<oauth2>/sign_in`) | `"/oauth2"` |
97100| `--proxy-websockets` | bool | enables WebSocket proxying | true |
98101| `--pubjwk-url` | string | JWK pubkey access endpoint: required by login.gov | |