diff --git a/man/nss-myhostname.xml b/man/nss-myhostname.xml
index 9a1125caae..e23b24483e 100644
--- a/man/nss-myhostname.xml
+++ b/man/nss-myhostname.xml
@@ -67,9 +67,13 @@
To activate the NSS modules, add myhostname to the line starting with
hosts: in /etc/nsswitch.conf.
- It is recommended to place myhostname last in the nsswitch.conf'
- hosts: line to make sure that this mapping is only used as fallback, and that any DNS or
- /etc/hosts based mapping takes precedence.
+ It is recommended to place myhostname either between resolve
+ and "traditional" modules like files and dns, or after them. In the
+ first version, well-known names like localhost and the machine hostname are given
+ higher priority than the external configuration. This is recommended when the external DNS servers and
+ network are not absolutely trusted. In the second version, external configuration is given higher
+ priority and nss-myhostname only provides a fallback mechanism. This might be suitable
+ in closely controlled networks, for example on a company LAN.
@@ -83,6 +87,9 @@
group: compat mymachines systemd
shadow: compat
+# Either (untrusted network):
+hosts: mymachines resolve [!UNAVAIL=return] myhostname files dns
+# Or (only trusted networks):
hosts: mymachines resolve [!UNAVAIL=return] files dns myhostname
networks: files
diff --git a/man/nss-mymachines.xml b/man/nss-mymachines.xml
index 71865874dd..1ff88aba2d 100644
--- a/man/nss-mymachines.xml
+++ b/man/nss-mymachines.xml
@@ -69,7 +69,7 @@
group: compat mymachines systemd
shadow: compat
-hosts: mymachines resolve [!UNAVAIL=return] files dns myhostname
+hosts: mymachines resolve [!UNAVAIL=return] myhostname files dns
networks: files
protocols: db files
diff --git a/man/nss-resolve.xml b/man/nss-resolve.xml
index 5c8b745881..cc33b2c082 100644
--- a/man/nss-resolve.xml
+++ b/man/nss-resolve.xml
@@ -67,7 +67,7 @@
group: compat mymachines systemd
shadow: compat
-hosts: mymachines resolve [!UNAVAIL=return] files dns myhostname
+hosts: mymachines resolve [!UNAVAIL=return] myhostname files dns
networks: files
protocols: db files
diff --git a/man/nss-systemd.xml b/man/nss-systemd.xml
index a5b3de73e7..ac22452bc3 100644
--- a/man/nss-systemd.xml
+++ b/man/nss-systemd.xml
@@ -65,7 +65,7 @@
group: compat [SUCCESS=merge] mymachines [SUCCESS=merge] systemd
shadow: compat
-hosts: mymachines resolve [!UNAVAIL=return] files dns myhostname
+hosts: mymachines resolve [!UNAVAIL=return] myhostname files dns
networks: files
protocols: db files