diff --git a/Makefile b/Makefile
index b9a1da4..0215e22 100644
--- a/Makefile
+++ b/Makefile
@@ -1,6 +1,6 @@
 .PHONY: setup-tls
 
-DOMAIN ::= website.com
+DOMAIN = website.com
 
 setup-tls: tls/cert.pem
 
diff --git a/README.md b/README.md
index aef3637..af240de 100644
--- a/README.md
+++ b/README.md
@@ -59,8 +59,19 @@ $ # ^ do that when you make changes to config
 
 # what if sth doesn't work?
 
+## using podman?
+give the nginx (sub)user access to the tls directory
+```console
+$ podman unshare setfacl -Rmu:101:rX tls/
+```
+
+## using docker?
 might be the `:z` label in the `volumes` in `docker-compose.yml`. remove it.
 e.g.
 ```
 - ./tls:/etc/nginx/tls:ro
 ```
+
+## using macOS?
+make is angry with you? you're on your own for this one. just read the commands and run them directly
+