docs/swarm/credentials.md: every host has at least one certificate

- Change 'Every host has one' to 'Every host has at least one' to clarify
  that a host may hold multiple mTLS client certificates.
This commit is contained in:
atlas 2026-09-16 23:24:54 +02:00
commit 596e8f006f

View file

@ -23,7 +23,7 @@ on disk.** It has to be a file, and the reason is the whole asymmetry: the
certificate is what authenticates a principal to the store, so it's the one certificate is what authenticates a principal to the store, so it's the one
credential that can't be fetched from the store. Something has to exist on credential that can't be fetched from the store. Something has to exist on
disk before the first request, or there's nothing to make the request with. disk before the first request, or there's nothing to make the request with.
Every host has one; its only power is to ask the store for the rest. Every host has at least one; its only power is to ask the store for the rest.
`swarm-bao.nix:529-533` states the rule for the nix option that carries it: `swarm-bao.nix:529-533` states the rule for the nix option that carries it:
this is _"the credential an operator places by hand"_, and _"a path, never a this is _"the credential an operator places by hand"_, and _"a path, never a
value."_ A literal in a nix expression lands in the nix store — value."_ A literal in a nix expression lands in the nix store —