add vanity host before puppet, otherwise links break

howto/static-component.md

@@ -122,6 +122,19 @@ This procedure is common to all cases:
 
  5. remove the `sudo` rules for the role user
 
+ 6. If we *do* want to keep a vanity site for the redirection, we
+    should also do this:
+
+    * add an entry to `roles::static_mirror_web_vanity`, in the
+      `ssl::service` block of
+      `modules/roles/manifests/static_mirror_web_vanity.pp`
+
+    * add a redirect in the template
+      (`modules/roles/templates/static-mirroring/vhost/vanity-vhosts.erb`),
+      for example:
+
+          Use vanity-host onionperf.torproject.org ^/(.*)$ https://gitlab.torproject.org/tpo/metrics/team/-/wikis/onionperf
+
  6. deploy the changes globally:
 
         ssh staticiforme puppet agent -t
@@ -147,19 +160,6 @@ This procedure is common to all cases:
          hosts: global
          servicegroups: mirror
 
-If we *do* want to keep a vanity site for the redirection, we should
-also do this:
-
- 1. add an entry to `roles::static_mirror_web_vanity`, in the
-    `ssl::service` block of
-    `modules/roles/manifests/static_mirror_web_vanity.pp`
-
- 2. add a redirect in the template
-    (`modules/roles/templates/static-mirroring/vhost/vanity-vhosts.erb`),
-    for example:
-
-        Use vanity-host onionperf.torproject.org ^/(.*)$ https://gitlab.torproject.org/tpo/metrics/team/-/wikis/onionperf
-
 If we do *not* want to keep a vanity site, we should also do this:
 
  2. remove the host to DNS, if not already present, see [howto/dns](howto/dns). this