diff --git a/README.md b/README.md
index 046bffb..b020225 100644
--- a/README.md
+++ b/README.md
@@ -16,6 +16,9 @@ This playbook assumes the target VPS is running the latest debian stable release
 ## Notes to my future self
 The deadswitch has the deadtrigger setup every run, so you have a 14-day timer to add a one-liner to your crontab to keep that deadtrigger set.
 
+Some DNS records also need to be set:
+- an A record with a `git.*` subdomain
+
 ## Usage
 ```sh
 ansible-playbook -i hosts --ask-vault-pass run.yml
diff --git a/secrets b/secrets
index 585d0fd..e643deb 160000
--- a/secrets
+++ b/secrets
@@ -1 +1 @@
-Subproject commit 585d0fd7dda8b515fc7c78cd1491c0ec7d79b05c
+Subproject commit e643deb62e0e0e2f05a9c4023468332002668c21