diff --git a/README.md b/README.md
index 8200f5f..b8c0088 100755
--- a/README.md
+++ b/README.md
@@ -2,8 +2,17 @@
 Live demo: https://eternalwinter.xmpub.org/
 Needs php imagemagick & sqlite modules.
 ## Installation
-Make sure the directory is writable by the web server.
-Run `./password.sh <password>` to generate the moderation password's hash.
-Put a ttf font in the directory and name it `captchafont.ttf`
-Edit `config.php` to customize.
-To moderate, visit a url and add `?manage=<your password>` to the end of the url
+* `git clone https://git.xmpub.org/xmpub/EternalWinter`
+* `mkdir secrets`
+* Make sure the directory is writable by the web server. `chown -R www-data:www-data EternalWinter`
+* Run `./password.sh <password>` to generate the moderation password's hash.
+* Put a ttf font in the directory and name it `captchafont.ttf`
+* Edit `config.php` to customize.
+* To moderate, visit a url and add `?manage=<your password>` to the end of the url
+IMPORTANT: You need to add a line to your server configuration to block `/secrets/` since it contains sensitive data like the database and your password hash.
+* nginx:
+```
+location /secrets/ {
+	 return 404;
+}
+```
\ No newline at end of file