diff --git a/doc/vault/setup.md b/doc/vault/setup.md
index 33a8d03..a31da24 100644
--- a/doc/vault/setup.md
+++ b/doc/vault/setup.md
@@ -36,9 +36,10 @@
     vault write pki_int/roles/servers_default \
         issuer_ref="$(vault read -field=default pki_int/config/issuers)" \
         allow_ip_sans=true \
-        allowed_domains="unkin.net" \
+        allowed_domains="unkin.net,prod*" \
         allow_subdomains=true \
         allow_bare_domains=true \
+        allow_glob_domains=true \
         max_ttl="2160h" \
         key_bits=4096 \
         country="Australia"