diff --git a/docs/resources/domain_dnssec.md b/docs/resources/domain_dnssec.md
new file mode 100644
index 0000000..4d5fb49
--- /dev/null
+++ b/docs/resources/domain_dnssec.md
@@ -0,0 +1,21 @@
+# Domain DNSSec Resource
+
+Allows to set non default (ie. non TransIP provide) DNS Sec records.
+Use together with `domain_nameservers` to safely use another DNS Provider (ie
+Cloudflare, AWS Route53, ....)
+
+## Argument Reference
+
+* `domain` - (Required) The domain, including the tld
+* `dnssec` - (Required) List of dnssec entries associated with domain
+
+### DNSSec object
+
+* `key_tag` - (Required) A 5-digit key of the Zonesigner
+* `flags` - (Required) The signing key number, either 256 (Zone Signing Key) or 257 (Key Signing Key)
+* `algorithm` - (Required) The algorithm type that is used, see: https://www.transip.nl/vragen/461-domeinnaam-nameservers-gebruikt-beveiligen-dnssec/ for the possible options.
+* `public_key` - (Required) The public key
+
+## Attribute Reference
+
+* `id` - n/a
diff --git a/docs/resources/domian_nameservers.md b/docs/resources/domian_nameservers.md
new file mode 100644
index 0000000..746ceaf
--- /dev/null
+++ b/docs/resources/domian_nameservers.md
@@ -0,0 +1,21 @@
+# Domain Nameservers Resource
+
+Allows to set non default (ie. non TransIP provide) nameservers.
+
+Use together with `domain_dnssec` to safely use another DNS Provider (ie
+Cloudflare, AWS Route53, ....)
+
+## Argument Reference
+
+* `domain` - (Required) The domain, including the tld
+* `nameserver` - (Required) List of nameservers associated with domain
+
+### Nameserver object
+
+* `hostname` - (Required) The hostname of this nameserver
+* `ipv4` - (Optional) ipv4 glue record for this nameserver
+* `ipv6` - (Optional) ipv6 glue record for this nameserver
+
+## Attribute Reference
+
+* `id` - n/a