service/static-shim.md

@@ -51,9 +51,12 @@ file looks like this (`build` stage elided for simplicity):
       file: static-shim-deploy.yml
 
 First, create the `production` deployment environment. Navigate to the
-project's Settings -> Deployments -> Environments and click `New
+project's `Deploy` -> `Environments` section (previously `Settings` ->
+`Deployments` -> `Environments`) and click `Create an
 environment`. Enter `production` in the `Name` field and the
-production URL in `External URL` (eg. `https://status.torproject.org`)
+production URL in `External URL`
+(eg. `https://status.torproject.org`). Leave the GitLab agent field
+empty.
 
 Next, you need to set an SSH key in the project. First, generate a
 password-less key locally:
@@ -67,9 +70,11 @@ following parameters:
  * Value: the content of the `id_rsa` file, above (yes, it's the
    private key)
  * Type: `file`
+ * Environment scope: `production`
  * Protect variable: checked
  * Masked variable: unchecked
- * Environment scope: `production`
+ * Expand variable reference: unchecked (not really necessary, but a
+   good precaution)
 
 Then the *public* part of that key needs to be added in Puppet. This
 can only be done by TPA, so file a ticket there if you need