service/donate.md

@@ -343,7 +343,14 @@ To build a new donation server:
    on `tor-puppet.git`
 3. run Puppet on the machine
 
-TODO: anything not in Puppet?
+This will pull the `containers.torproject.org/tpo/web/donate-neo/main` container
+image from the GitLab registry and deploy it, along with Apache, TLS
+certificates and the onion service.
+
+For auto-deployment from GitLab CI to production, the CI variables
+`PROD_DEPLOY_SSH_HOST_KEY` (prod server ssh host key), and
+`PROD_DEPLOY_SSH_PRIVATE_KEY` (ssh key authorized to login with `tordonate`
+user) must be configured in the project's CI/CD settings.
 
 ### donate review server