diff --git a/nix/host-modules/swarm-authelia.nix b/nix/host-modules/swarm-authelia.nix
index dc0cb3e0..86d844f8 100644
--- a/nix/host-modules/swarm-authelia.nix
+++ b/nix/host-modules/swarm-authelia.nix
@@ -985,8 +985,14 @@ in
 
     # The bridge as well as authelia: it is the half that writes the identity
     # store, and its refusals are returned to callers as a bare 401.
+    #
+    # `unitName`, never a literal: upstream derives the unit from the instance
+    # name, so the running unit is `authelia-<instance>` and a hardcoded
+    # "authelia" matches nothing. Nothing reports that — the receiver's `units`
+    # is an allowlist, so a name that matches no journal entry is silently
+    # absent and reads exactly like a service with nothing to say.
     services.hyperhive.swarm.otel.journaldUnits = [
-      "authelia"
+      unitName
       "swarm-authelia-bridge"
     ];