diff --git a/install-debian.md b/install-debian.md
index 64d4169..01a01df 100644
--- a/install-debian.md
+++ b/install-debian.md
@@ -18,6 +18,7 @@ title: Setting up a fresh install of Canopy over Debian 12 Bookworm
+
## Step-by-step procedure for Setting up a fresh install of Canopy over Debian 12 Bookworm:
Before installing make sure you have already prepped your [database](mongodb-debian).
## Installation
@@ -49,7 +50,12 @@ WantedBy=multi-user.target
## SSL Setup
1. Ignore the EFF's instruction like an asshole, and install certbot through apt `sudo apt install certbot`.
Snap is garbage and pip is weird on Debian 12. Was having issues with pulling it over pipx.
-2.
+2. Run `sudo cerbot certonly --webroot` to initiate the certificate challenge
+3. Accept the ToS and make decisions about your email address usage.
+4. Enter your instance domain name
+5. Enter your webroot location (such as '/home/canopy/canopy/www')
+6. Hand the certs over to the 'canopy' user `sudo chown canopy:canopy -R /etc/letsencrypt/live`
+7. Add the new cert and key file to your config, and set protocol to HTTPS
## Reverse-Proxy Setup
1. Install NGINX `sudo apt install nginx`