service/dangerzone.md

@@ -108,6 +108,11 @@ The service is deployed using the `profile::dangerzone` class in Puppet,
 and uses data such as the Nextcloud username and access token retrieved
 from Hiera.
 
+Puppet actually deploys the source code directly from git, using a
+`Vcsrepo` resource. This means that changes merged to the `main`
+branch on the [dangerzone-webdav-processor git repository](https://gitlab.torproject.org/tpo/tpa/dangerzone-webdav-processor/) are
+deployed as soon as Puppet runs on the server.
+
 ## SLA
 
 There are no service level guarantees for the service, but during