diff --git a/ndncert/debian/ndncert-server.default b/ndncert/debian/ndncert-server.default
new file mode 100644
index 0000000..4735d85
--- /dev/null
+++ b/ndncert/debian/ndncert-server.default
@@ -0,0 +1,4 @@
+# ndncert-ca-server defaults
+
+# Whether ndncert-ca-server publishes cert to repo
+FLAGS="-r"