diff --git a/tsa/howto/new-machine-hetzner-robot.mdwn b/tsa/howto/new-machine-hetzner-robot.mdwn
index f5033ee2327b0aa03938909102b9130c1b27fd50..b24bda547a33c06edc5130c4a3cec121bfaf4a93 100644
--- a/tsa/howto/new-machine-hetzner-robot.mdwn
+++ b/tsa/howto/new-machine-hetzner-robot.mdwn
@@ -96,6 +96,10 @@ which we'll use below.
         /dev/mapper/archive01-swap      none    swap    defaults        0       0
         proc           /proc        proc    defaults                      0   0
 
+ 5. setup dropbear-initramfs to unlock the filesystem on boot. this
+    can be done with the `tor-install-luks-setup` in the `tsa-misc`
+    repository.
+
  5. Review the crypto configuration:
 
         editor /mnt/etc/crypttab