diff --git a/defaults/renew_consul_certificates.yml.sample b/defaults/renew_consul_certificates.yml.sample
new file mode 100644
index 0000000..50a2598
--- /dev/null
+++ b/defaults/renew_consul_certificates.yml.sample
@@ -0,0 +1,20 @@
+---
+# renew_consul_certificates_config_dir: /etc/consul-template.d/consul
+# renew_consul_certificates_consul_user: consul
+# renew_consul_certificates_consul_group: consul
+# renew_consul_certificates_vault_addr: "https://consul.example.com"
+# renew_consul_certificates_vault_token: mysupersecretconsultokenthatyoushouldchange
+# renew_consul_certificates_vault_token_unwrap: false
+# renew_consul_certificates_vault_token_renew: true
+# renew_consul_certificates_ca_dest: /opt/consul/tls/ca.pem
+# renew_consul_certificates_cert_dest: /opt/consul/tls/cert.pem
+# renew_consul_certificates_key_dest: /opt/consul/tls/key.pem
+# renew_consul_certificates_info:
+#   issuer_path: pki/issue/your-issuer
+#   common_name: consul01.example.com
+#   ttl: 90d
+#   is_server: false
+#   include_consul_service: false
+# renew_consul_certificates_consul_dc_name: dc1.consul
+# renew_consul_certificates_consul_service_name: consul.service.consul
+# renew_consul_certificates_start_service: false