diff --git a/src/support/dns.md b/src/support/dns.md
new file mode 100644
index 0000000..9c1d38d
--- /dev/null
+++ b/src/support/dns.md
@@ -0,0 +1,14 @@
+# Certificate expired
+## How to diagnose
+Given the domain is `domain.tld` get the logs of ACME.
+```bash
+journalctl -r -u acme-domain.tld
+# Jitsi has a different cert
+journalctl -r -u acme-meet.domain.tld
+```
+
+## Deleting certs
+If current certs broken, you may delete certs by nuking `/val/lib/acme`. After reboot, ACME will try to get certs again.
+
+## Cloudflare token
+Required to obtain certs. Make sure it's valid. Located in `/etc/nixos/userdata/userdata.json`