diff --git a/setup/README.md b/setup/README.md
index 7254dbf7..0d1c0ee6 100644
--- a/setup/README.md
+++ b/setup/README.md
@@ -13,3 +13,12 @@ If everything succeeds then open your browser http://mydomain.com/ and you shoul
 The install script is tested on Ubuntu 16.04 and the server must be blank. There should be no existing software installed (eg. Apache or MySQL). If the server already has something installed, then remove the extra application before running this script.
 
 Be aware though that the installation is not set up securely. MongoDB and Redis do not have authentication enabled. There are only self-signed certs installed (and Haraka on port 25 does not have any certs installed). The webmail app rins on HTTP which also means that Yubikey 2FA does not work.
+
+## Config files
+
+Configuration files are installed to the following locations:
+
+1. WildDuck: /etc/wildduck
+2. ZoneMTA: /etc/zone-mta
+3. WildDuck Webmail: /etc/wildduck/wildduck-webmail.toml
+4. Haraka: /opt/haraka/config