Add host config to the security documentation