diff --git a/docs/swarm/secrets.md b/docs/swarm/secrets.md index 37ee6456..764fef47 100644 --- a/docs/swarm/secrets.md +++ b/docs/swarm/secrets.md @@ -160,9 +160,9 @@ did before. The **second reader** is the agent containers' queue credential: `glue-queue-agent-credential.nix` lands it as two files, the client secret and -the client id it authenticates, because that is how a queue client reads them — -the secret by path, the id by value. There is no local fallback and none is -possible, so absent files mean this hive's agents do not connect, which is what +the client id it authenticates, because that's how a queue client reads them — +the secret by path, the id by value. No local fallback exists, and none is +possible, so absent files mean this hive's agents don't connect, which is what a swarm looks like before the publisher on the authelia host has run. ⚠️ **Service↔store mTLS is its own trust domain.** A credential you must