diff --git a/.env.production.sample b/.env.production.sample
index 53c1835dc4387f59a6405e47cc6b512f7d794add..aca26fbf8a94694ad77ee0b7e354ecaae76cabac 100644
--- a/.env.production.sample
+++ b/.env.production.sample
@@ -12,7 +12,7 @@ LOCAL_DOMAIN=example.com
 LOCAL_HTTPS=true
 
 # Application secrets
-# Generate each with the `rake secret` task (`docker-compose run --rm web rake secret` if you use docker compose)
+# Generate each with the `rake secret` task: docker compose run --rm app bundle exec rake secret
 PAPERCLIP_SECRET=
 SECRET_KEY_BASE=
 OTP_SECRET=
diff --git a/README.md b/README.md
index 3e66b328756a16ed4b4a1c08136f1adf64226c2b..70e30c0c6d7f8ac962cc36587020007a27535476 100644
--- a/README.md
+++ b/README.md
@@ -1,9 +1,21 @@
 # mastodon
 Mastodon application for libre.sh
 
+## Copy configuration
+
+    cp .env.production.sample .env.production
+
 ## Generate secrets
 
-## rake db:migrate
+Do this three times:
+
+    docker compose run --rm app bundle exec rake secret
+
+Fill the generated keys into the blank secrets in `.env.production`.
+
+## Migrate database
+
+    docker compose run --rm app bundle exec rake db:migrate
 
 ## First ownser user