diff --git a/docs/data/zz_cli_help.toml b/docs/data/zz_cli_help.toml
index 629b05d6a..6bc3e52a5 100644
--- a/docs/data/zz_cli_help.toml
+++ b/docs/data/zz_cli_help.toml
@@ -68,6 +68,8 @@ OPTIONS:
    --dns.propagation-wait duration                                By setting this flag, disables all the propagation checks of the TXT record and uses a wait duration instead. (default: 0s)
    --dns.resolvers string [ --dns.resolvers string ]              Set the resolvers to use for performing (recursive) CNAME resolving and apex domain determination. For DNS-01 challenge verification, the authoritative DNS server is queried directly. Supported: host:port. The default is to use the system resolvers, or Google's DNS resolvers if the system's cannot be determined.
    --dns-timeout int                                              Set the DNS timeout value to a specific value in seconds. Used only when performing authoritative name server queries. (default: 10)
+   --ipv4only, -4                                                 Use IPv4 only.
+   --ipv6only, -6                                                 Use IPv6 only.
    --csr string, -c string                                        Certificate signing request filename, if an external CSR is to be used.
    --no-bundle                                                    Do not create a certificate bundle by adding the issuers certificate to the new certificate.
    --must-staple                                                  Include the OCSP must staple TLS extension in the CSR and generated certificate. Only works if the CSR is generated by lego.
@@ -128,6 +130,8 @@ OPTIONS:
    --dns.propagation-wait duration                                By setting this flag, disables all the propagation checks of the TXT record and uses a wait duration instead. (default: 0s)
    --dns.resolvers string [ --dns.resolvers string ]              Set the resolvers to use for performing (recursive) CNAME resolving and apex domain determination. For DNS-01 challenge verification, the authoritative DNS server is queried directly. Supported: host:port. The default is to use the system resolvers, or Google's DNS resolvers if the system's cannot be determined.
    --dns-timeout int                                              Set the DNS timeout value to a specific value in seconds. Used only when performing authoritative name server queries. (default: 10)
+   --ipv4only, -4                                                 Use IPv4 only.
+   --ipv6only, -6                                                 Use IPv6 only.
    --csr string, -c string                                        Certificate signing request filename, if an external CSR is to be used.
    --no-bundle                                                    Do not create a certificate bundle by adding the issuers certificate to the new certificate.
    --must-staple                                                  Include the OCSP must staple TLS extension in the CSR and generated certificate. Only works if the CSR is generated by lego.