From 596e8f006fc8c4655ef79f3ef4da22d53f6d99fd Mon Sep 17 00:00:00 2001 From: atlas Date: Wed, 16 Sep 2026 23:24:54 +0200 Subject: [PATCH] docs/swarm/credentials.md: every host has at least one certificate - Change 'Every host has one' to 'Every host has at least one' to clarify that a host may hold multiple mTLS client certificates. --- docs/swarm/credentials.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/swarm/credentials.md b/docs/swarm/credentials.md index e39bc973..639a16b5 100644 --- a/docs/swarm/credentials.md +++ b/docs/swarm/credentials.md @@ -23,7 +23,7 @@ on disk.** It has to be a file, and the reason is the whole asymmetry: the certificate is what authenticates a principal to the store, so it's the one credential that can't be fetched from the store. Something has to exist on disk before the first request, or there's nothing to make the request with. -Every host has one; its only power is to ask the store for the rest. +Every host has at least one; its only power is to ask the store for the rest. `swarm-bao.nix:529-533` states the rule for the nix option that carries it: this is _"the credential an operator places by hand"_, and _"a path, never a value."_ A literal in a nix expression lands in the nix store —