diff --git a/manage/sites/configure-site.mdx b/manage/sites/configure-site.mdx
index 0655dd0..5f42df8 100644
--- a/manage/sites/configure-site.mdx
+++ b/manage/sites/configure-site.mdx
@@ -88,56 +88,6 @@ Almost every setting below can also be set via an environment variable (**Env va
**Env var**: `CONFIG_FILE`
-
- Port for the peers to connect to the site on. This can be used to keep a static port open in firewalls instead of default random ports.
-
- **Example**: `34534`
-
- **Env var**: `PORT`
-
- **Config file key**: `port`
-
-
-
- Use a native WireGuard interface for client tunnels instead of the userspace netstack implementation.
-
- **Default**: `false`
-
- **Env var**: `USE_NATIVE_INTERFACE`
-
- **Config file key**: `native`
-
-
-
- Use a native WireGuard interface for the main tunnel (instead of netstack).
-
- **Default**: `false`
-
- **Env var**: `USE_NATIVE_MAIN_INTERFACE`
-
- **Config file key**: `nativeMain`
-
-
-
- Name of the native main tunnel WireGuard interface (used with `--native-main`).
-
- **Default**: `pangolin`
-
- **Env var**: `INTERFACE_MAIN`
-
- **Config file key**: `interfaceMain`
-
-
-
- MTU for the internal WireGuard interface.
-
- **Default**: `1280`
-
- **Env var**: `MTU`
-
- **Config file key**: `mtu`
-
-
DNS server to use for resolving the endpoint.
@@ -272,16 +222,6 @@ Almost every setting below can also be set via an environment variable (**Env va
**Config file key**: `disableSsh`
-
- Name of the WireGuard interface.
-
- **Default**: `pangolin`
-
- **Env var**: `INTERFACE`
-
- **Config file key**: `interface`
-
-
Enable Prometheus /metrics exporter.
@@ -460,6 +400,83 @@ Almost every setting below can also be set via an environment variable (**Env va
**Config file key**: `preferEndpoint`
+
+
+ Name of the WireGuard interface.
+
+ **Default**: `pangolin`
+
+ **Env var**: `INTERFACE`
+
+ **Config file key**: `interface`
+
+
+
+ Port for the peers to connect to the site on. This can be used to keep a static port open in firewalls instead of default random ports.
+
+ **Example**: `34534`
+
+ **Env var**: `PORT`
+
+ **Config file key**: `port`
+
+
+
+ Use a native WireGuard interface for client tunnels instead of the userspace netstack implementation.
+
+
+ Most users should not use this feature.
+
+
+ **Default**: `false`
+
+ **Env var**: `USE_NATIVE_INTERFACE`
+
+ **Config file key**: `native`
+
+
+
+ Use a native WireGuard interface for the main tunnel (instead of netstack).
+
+
+ Most users should not use this feature.
+
+
+ **Default**: `false`
+
+ **Env var**: `USE_NATIVE_MAIN_INTERFACE`
+
+ **Config file key**: `nativeMain`
+
+
+
+ Name of the native main tunnel WireGuard interface (used with `--native-main`).
+
+
+ Most users should not use this feature.
+
+
+ **Default**: `pangolin`
+
+ **Env var**: `INTERFACE_MAIN`
+
+ **Config file key**: `interfaceMain`
+
+
+
+ MTU for the internal WireGuard interface.
+
+
+ Most users should not use this feature.
+
+
+ **Default**: `1280`
+
+ **Env var**: `MTU`
+
+ **Config file key**: `mtu`
+
+
## Config File
The site can be configured entirely with a JSON config file instead of (or in addition to) CLI flags and environment variables. Almost every flag documented above has a matching camelCase key in this file — see the **Config file key** on each flag for its exact name.