diff --git a/doc/vault/setup.md b/doc/vault/setup.md
index 1ec2ca2..8e4f23b 100644
--- a/doc/vault/setup.md
+++ b/doc/vault/setup.md
@@ -34,6 +34,7 @@
 # create role
     vault write pki_int/roles/unkin-dot-net \
          issuer_ref="$(vault read -field=default pki_int/config/issuers)" \
+         allow_ip_sans=true \
          allowed_domains="unkin.net" \
          allow_subdomains=true \
          max_ttl="2160h"