diff --git a/README.md b/README.md
index 5e85248..90d1ef9 100644
--- a/README.md
+++ b/README.md
@@ -7,6 +7,11 @@
   - [Synopsis](#synopsis)
   - [WARNING](#warning)
   - [Features](#features)
+    - [Installation](#installation)
+    - [Configuration](#configuration)
+      - [Core](#core)
+      - [Optional](#optional)
+    - [Service](#service)
   - [Dependencies](#dependencies)
   - [Deployment](#deployment)
   - [Parameters](#parameters)
@@ -29,11 +34,13 @@ Fail2Ban is an intrusion prevention software framework that protects computer se
 
 ## Features
 
-Installation
+### Installation
 
 - install required binaries
 
-Configuration
+### Configuration
+
+#### Core
 
 - manage directory structure  (file system permissions, selinux context)
 - manage configuration files   (file system permissions, selinux context, content based on parameters)
@@ -47,7 +54,11 @@ Configuration
 - `fn_destemail`: the email address to be notified
 - `fn_bantime`: the the time an attacker IP is banned.
 
-Service
+#### Optional
+
+- enable nagios monitoring of the fail2ban service, where the number of minimum allowed processes can be configured with `fn_procs_allowed`.
+
+### Service
 
 - manage service status