diff --git a/nsupdate/main/templates/main/generate_ns_secret.html b/nsupdate/main/templates/main/generate_ns_secret.html
index 8a33b74..99d103c 100644
--- a/nsupdate/main/templates/main/generate_ns_secret.html
+++ b/nsupdate/main/templates/main/generate_ns_secret.html
@@ -49,6 +49,35 @@ zone {{ object.domain }} {
 };
 </pre>
             </div>
-        </div>
+            <div class="well">
+                <h3>How to setup the initial zone file?</h3>
+                <pre>
+$ORIGIN .
+$TTL 3600       ; 1 hour
+; note: please fix SOA, NS, A, AAAA, MX as needed:
+{{ object.domain }}           IN SOA  ns1.{{ object.domain }}. root.{{ object.domain }}. (
+                                2013123101 ; serial
+                                7200       ; refresh (2 hours)
+                                1800       ; retry (30 minutes)
+                                604800     ; expire (1 week)
+                                60         ; minimum (1 minute)
+                                )
+                        NS      ns1.{{ object.domain }}.
+                        NS      ns2.{{ object.domain }}.
+                        A       1.2.3.4
+                        AAAA    ::
+                        MX      10 mail.{{ object.domain }}.
+$ORIGIN {{ object.domain }}.
+$TTL 3600       ; 1 hour
+; note: the www, ipv4, ipv6 host entries are ONLY needed if you run the
+; nsupdate.info service on these hosts. if you just want to add another
+; domain that can be updated from an existing nsupdate.info service, you
+; won't need these host records:
+www                     A       1.2.3.4
+                        AAAA    ::1
+ipv4                    A       1.2.3.4
+ipv6                    AAAA    ::1
+</pre>
+            </div>
     </div>
 {% endblock %}