diff --git a/README.md b/README.md
index 2bcf2ec..a014242 100644
--- a/README.md
+++ b/README.md
@@ -5,7 +5,7 @@ ansible playbook for solanum that supports hosts running debian or alpine
 ## setup
 - add new host to your hosts file
 - run `solanum.yml` on new host to compile solanum
-- (optional) add your `ssl.pem` and `ssl.key` to `/home/ircd/ircd/etc/`. you probably want to make a cronjob for acme to automatically do this when the cert expires
+- (optional) add your `ssl.pem` and `ssl.key` to `/home/ircd/ircd/etc/`. you probably want to make a cronjob for acme to automatically do this when the cert expires. make sure to `openssl dhparam -out dh.pem 2048` in `/home/ircd/ircd/etc/` to make safe dh parameters!
 - run config.yml on the whole network
 - repeat steps periodically for network maintainance