diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 8b05f0beeb1fd86c8a8cfe53160874312a5a1f79..1e53802cf015a62aac49125751b618890e1c74d7 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -23,6 +23,9 @@ publish:
       - publish
       - master
   script:
+    # https://www.npmjs.com/settings/dbp-deploy/tokens
+    # NPM_TOKEN needs to be a "Publish" token with 2FA disabled!
+    # "Automation" tokens don't work with lerna (even if they would work with "npm publish")
     - echo '//registry.npmjs.org/:_authToken=${NPM_TOKEN}' > ~/.npmrc
     - yarn config set cache-folder "$CI_PROJECT_DIR/_yarn_cache"
     - yarn install