diff --git a/doc/infrastructure.md b/doc/infrastructure.md
index cac85e9..24073c3 100644
--- a/doc/infrastructure.md
+++ b/doc/infrastructure.md
@@ -181,13 +181,15 @@ Go to [CircleCI](https://app.circleci.com/dashboard) and enable builds
 for your fork of Riju. In the project settings, configure the
 following environment variables:
 
-* `DOCKER_REPO`: same as in `.env`
-* `DOMAIN`: same as in `.env`
-* `S3_BUCKET`: same as in `.env`
 * `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY`: the AWS access
   credentials generated by Terraform
+* `DEPLOY_SSH_PRIVATE_KEY`: base64-encoded SSH private key, e.g. from
+  `base64 -w0 ~/.ssh/id_rsa_riju_deploy`
+* `DOCKER_REPO`: same as in `.env`
 * `DOCKER_USERNAME` and `DOCKER_PASSWORD`: your credentials for Docker
   Hub
+* `DOMAIN`: same as in `.env`
+* `S3_BUCKET`: same as in `.env`
 
 You should now be able to trigger a build and see the production
 instance updated automatically with a newly built image.