vi dsa-puppet/modules/roles/templates/static-mirroring/vhost/static-vhosts-simple.erb
}}}
-* run puppet on the master, the source, and all the mirrors. Check {{{dsa-puppet/hieradata/common.yaml}}.
+* run puppet on the master, the source, and all the mirrors. Check {{{dsa-puppet/hieradata/common.yaml}}}.
+
+== Adding a mirror
+
+Note: This might temporarily break apache on the new mirror host.
+
+* Add host to {{{static_mirror}}} and {{{static_mirror_nopush}}} in {{{hieradata/common.yaml}}}.
+* Add {{{staticsync}}} group to host's {{{allowedGroups}}} attribute in ldap.
+* Run puppet twice on new static mirror once staticsync exists.
+* Run puppet on static masters.
+* On the static mirror: {{{install -d -o staticsync -g staticsync -m 02755 /srv/static.debian.org}}}.
+* Run the command from {{{/etc/cron.d/puppet-static-mirror}}} on the mirror.
+* Make sure apache works on the mirror. This might require deploying SSL keys.
+* Remove mirror from {{{static_mirror_nopush}}}.
+* Run puppet on static masters.
+* Rotate mirror.