diff --git a/install-stack.sh b/install-stack.sh
index d60760b..92aa9aa 100755
--- a/install-stack.sh
+++ b/install-stack.sh
@@ -145,10 +145,13 @@ collect_config() {
 
   OFFICE_IP=$(whiptail --title "Hotel Manage — Site Config" \
     --inputbox \
-"Office IP / CIDR / DDNS hostname for offsite restriction.
-Examples:  203.0.113.5   10.4.0.0/22   hotel.dyndns.org
-Type 'disabled' to allow access from anywhere:" \
-    11 64 "disabled" 3>&1 1>&2 2>&3) || exit 0
+"Onsite matcher(s) for offsite restriction — comma-separated, any match = onsite.
+Each can be: an IP, a CIDR, a DDNS hostname, or 'auto' (self-detect the site's
+public IP — no DDNS service needed). 'disabled' allows access from anywhere.
+
+Recommended for a dynamic public IP:  10.4.0.0/22,auto
+  (LAN clients match the CIDR; public-IP/hairpin clients match auto)" \
+    13 72 "10.4.0.0/22,auto" 3>&1 1>&2 2>&3) || exit 0
 
   ADMIN_EMAIL=$(whiptail --title "Hotel Manage — Admin Account" \
     --inputbox "Admin user email:" 8 52 "" 3>&1 1>&2 2>&3) || exit 0