diff --git a/deployment/README.org b/deployment/README.org
index 1b9252bc..0ba78feb 100644
--- a/deployment/README.org
+++ b/deployment/README.org
@@ -2,30 +2,25 @@
 
 * Quick links
 - Proxmox API doc :: https://pve.proxmox.com/pve-docs/api-viewer
-- Fediversity Proxmox ::
-  - http://192.168.51.81:8006/.
-  - It is only accessible via Procolix's VPN:
-      - Get credentials for the VPN portal and Proxmox from [Kevin](https://git.fediversity.eu/kevin).
-      - Log in to the [VPN portal](https://vpn.fediversity.eu/vpn-user-portal/home)
-      - Create a **New Configuration**:
-        - Select **WireGuard (UDP)**
-        - Enter some name, e.g. `fediversity`
-        - Click Download
-      - Write the WireGuard configuration to a file `fediversity-vpn.config` next to your NixOS configuration
-        - Add that file's path to `.git/info/exclude` and make sure it doesn't otherwise leak (for example, use [`agenix`](https://github.com/ryantm/agenix) to manage secrets)
-      - To your NixOS configuration, add
-        ```nix
-        { ... }:
-        {
-          networking.wg-quick.interfaces = {
-            fediversity.configFile = toString ./fediversity-vpn.config;
-          };
-        }
-        ```
-  - Select “Promox VE authentication server”.
-  - Ignore “You do not have a valid subscription” message.
+- Fediversity Proxmox :: http://192.168.51.81:8006/
 * Basic terminology
 - Node :: physical host
+* Fediversity Proxmox
+- It is only accessible via Procolix's VPN:
+  - Get credentials for the VPN portal and Proxmox from [[https://git.fediversity.eu/kevin][Kevin]].
+  - Log in to the [[https://vpn.fediversity.eu/vpn-user-portal/home][VPN portal]].
+    - Create a *New Configuration*:
+    - Select *WireGuard (UDP)*
+    - Enter some name, e.g. ~fediversity~
+    - Click Download
+  - Write the WireGuard configuration to a file ~fediversity-vpn.config~ next to your NixOS configuration
+    - Add that file's path to ~.git/info/exclude~ and make sure it doesn't otherwise leak (for example, use [[https://github.com/ryantm/agenix][Agenix]] to manage secrets)
+  - To your NixOS configuration, add
+    #+begin_src nix
+    networking.wg-quick.interfaces.fediversity.configFile = toString ./fediversity-vpn.config;
+    #+end_src
+- Select “Promox VE authentication server”.
+- Ignore the “You do not have a valid subscription” message.
 * Automatically
 This directory contains scripts that can automatically provision or remove a
 Proxmox VM. For now, they are tied to one node in the Fediversity Proxmox, but