diff --git a/README.md b/README.md
index 45f5858..3f835a3 100644
--- a/README.md
+++ b/README.md
@@ -54,6 +54,22 @@ SSH keys are pre-authorized from `secrets/authorized_keys` which contains the pu
 
 ## Setup
 
+### Bootstrapping
+
+SSH in to the host as root and get into a shell with `git`.
+
+```shell
+nix-channel --update && nix-shell -p git
+```
+
+Then build the system from the flake
+
+```shell
+nixos-rebuild switch --flake git+https://gitea.john-stream.com/john/ad-nix#ad-nix
+```
+
+### Secrets
+
 `secrets/secrets.yaml` needs to have
 
 - `telegraf_influx_token`