Do operations in the right (safe) order

docs/faq.rst

@@ -374,7 +374,7 @@ How do I setup a MTA-STS policy?
 
 Mailu can serve an `MTA-STS policy`_; To configure it you will need to:
 
-1. setup the appropriate DNS/CNAME record (``mta-sts.example.com`` -> ``mailu.example.com``) and DNS/TXT record (``_mta-sts.example.com`` -> ``v=STSv1; id=1``) paying attention to the ``TTL`` as this is used by MTA-STS.
+1. add ``mta-sts.example.com`` to the ``HOSTNAMES`` configuration variable (and ensure that a valid SSL certificate is available for it)
 
 2. configure an override with the policy itself; for example, your ``overrides/nginx/mta-sts.conf`` could read:
 
@@ -387,7 +387,7 @@ Mailu can serve an `MTA-STS policy`_; To configure it you will need to:
    mx: mailu.example.com\r\n";
    }
 
-3. add ``mta-sts.example.com`` to the ``HOSTNAMES`` configuration variable (and ensure that a valid SSL certificate is available for it)
+3. setup the appropriate DNS/CNAME record (``mta-sts.example.com`` -> ``mailu.example.com``) and DNS/TXT record (``_mta-sts.example.com`` -> ``v=STSv1; id=1``) paying attention to the ``TTL`` as this is used by MTA-STS.
 
 *issue reference:* `1798`_.