diff --git a/container/Vpn.nix b/container/Vpn.nix
index 4827a1fa..e35a3b75 100644
--- a/container/Vpn.nix
+++ b/container/Vpn.nix
@@ -1,6 +1,7 @@
 # easyrsa init-pki
 # easyrsa build-ca
 # easyrsa build-server-full <SERVER_NAME> nopass
+# export EASYRSA_CERT_EXPIRE=36500
 # easyrsa build-client-full <CLIENT_NAME> nopass
 # openssl dhparam -out dh2048.pem 2048
 # Don't forget to set tls hostname on the client to match SERVER_NAME *AND* disable ipv6 ?