example.ini: disable all optional keys, to be sure the user won't use them if not needed

example.ini

@@ -8,7 +8,7 @@ CSRFile = domain.csr
 
 # Optional ACME directory url
 # Default: https://acme-staging-v02.api.letsencrypt.org/directory
-ACMEDirectory = https://acme-staging-v02.api.letsencrypt.org/directory
+#ACMEDirectory = https://acme-staging-v02.api.letsencrypt.org/directory
 
 # Optional To be able to be reached by ACME provider (e.g. to warn about
 # certificate expicration), you can provide some contact informations.
@@ -18,12 +18,12 @@ ACMEDirectory = https://acme-staging-v02.api.letsencrypt.org/directory
 # For the mailto URI, the email address part must contains only one address
 # without header fields (see [RFC6068]).
 # Default: none
-Contacts = mailto:mail@example.com;mailto:mail2@example.org
+#Contacts = mailto:mail@example.com;mailto:mail2@example.org
 
 # Optional to give hint to the ACME server about your prefered language for errors given by their server
 # See https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Accept-Language for more informations
 # Default: en
-Language = en
+#Language = en
 
 # Optional: ask to request different format of certificate file.
 # By default, acme-dns-tiny request a certificate chain with format
@@ -35,7 +35,7 @@ Language = en
 # (e.g. application/pkix-cert, applicaiton/pkcs7-mime)
 # Note that, if the format selected doesn't provide a full chain, you should
 # read logs to find the related certificates (see link header with attribute rel=up)
-CertificateFormat = application/pem-certificate-chain
+#CertificateFormat = application/pem-certificate-chain
 
 [TSIGKeyring]
 # Required TSIG key name
@@ -55,11 +55,11 @@ Zone = dnszone
 Host = dnsserver
 
 # Optional port to connect on DNS server (default: 53)
-Port = 53
+#Port = 53
 
 # Optional time to live (TTL) value used to add DNS entries
 # For each domain registered in the CSR, at least 1 TTL is waited before certificate creation.
 # If an error occurs while looking for TXT records, we wait up to 10 TTLs by domain.
 # That's why the default is only of 10 seconds, to avoid having too long time to wait to receive a new certificate.
 # Default: 10 seconds
-TTL = 10
+#TTL = 10