diff --git a/README.md b/README.md
index 922b21a..4831de2 100644
--- a/README.md
+++ b/README.md
@@ -24,6 +24,7 @@ setup.sh             # One-time server provisioning script
 On a fresh Rocky Linux 9 (or compatible) install:
 
 ```bash
+dnf install -y epel-release
 dnf install -y git git-crypt
 git clone <repo-url> /opt
 git-crypt unlock /path/to/git-crypt-key
diff --git a/setup.sh b/setup.sh
index dda8dc5..c1ec5e4 100644
--- a/setup.sh
+++ b/setup.sh
@@ -5,7 +5,7 @@ set -euo pipefail
 # Run as root after cloning the repo to /opt/.
 #
 # Usage:
-#   1. dnf install -y git git-crypt
+#   1. dnf install -y epel-release && dnf install -y git git-crypt
 #   2. git clone <repo-url> /opt
 #   3. git-crypt unlock /path/to/git-crypt-key
 #   4. /opt/setup.sh
@@ -18,11 +18,11 @@ if [ "$(id -u)" -ne 0 ]; then
 fi
 
 if ! command -v git &>/dev/null; then
-    errors+=("git is not installed. Run: dnf install -y git git-crypt")
+    errors+=("git is not installed. Run: dnf install -y epel-release && dnf install -y git git-crypt")
 fi
 
 if ! command -v git-crypt &>/dev/null; then
-    errors+=("git-crypt is not installed. Run: dnf install -y git git-crypt")
+    errors+=("git-crypt is not installed. Run: dnf install -y epel-release && dnf install -y git git-crypt")
 fi
 
 if [ "$(pwd)" != "/opt" ] && [ "$(dirname "$(readlink -f "$0")")" != "/opt" ]; then
@@ -37,7 +37,7 @@ if [ ${#errors[@]} -gt 0 ]; then
     echo "ERROR: Prerequisites not met."
     echo ""
     echo "Please complete the initial setup before running this script:"
-    echo "  1. dnf install -y git git-crypt"
+    echo "  1. dnf install -y epel-release && dnf install -y git git-crypt"
     echo "  2. git clone <repo-url> /opt"
     echo "  3. git-crypt unlock /path/to/git-crypt-key"
     echo "  4. /opt/setup.sh"