From 0b8688296510edbbf3d9ba884660a6fbcd7c92b0 Mon Sep 17 00:00:00 2001 From: Niels Mokkenstorm Date: Mon, 10 Aug 2026 18:58:49 +0200 Subject: [PATCH] docs: cut the gen-secrets header to the rotation trap --- e2e/devnet/gen-secrets.sh | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/e2e/devnet/gen-secrets.sh b/e2e/devnet/gen-secrets.sh index 5f302e0..79d26c1 100755 --- a/e2e/devnet/gen-secrets.sh +++ b/e2e/devnet/gen-secrets.sh @@ -1,8 +1,7 @@ #!/usr/bin/env bash -# Generates fresh secrets into .env (gitignored). Re-run to rotate; existing -# accounts on the PDS volume become unreachable if you rotate JWT_SECRET or -# the PLC rotation key after accounts already exist, so only run this once -# per devnet lifetime (delete the pds-data volume too if you do rotate). +# Rotating JWT_SECRET or the PLC rotation key orphans every account already on +# the PDS volume: run once per devnet lifetime, and delete pds-data if you do +# rotate. set -euo pipefail cd "$(dirname "${BASH_SOURCE[0]}")" -- 2.51.2