diff --git a/services/racksnaps-watcher/README.md b/services/racksnaps-watcher/README.md
index 6e97b31..41987b0 100644
--- a/services/racksnaps-watcher/README.md
+++ b/services/racksnaps-watcher/README.md
@@ -7,4 +7,9 @@ This service is responsible for polling the Racksnaps website for new catalog sn
 This service is allowed to interact with the following data sources:
 
 - https://racksnaps.defn.io/ (read-only)
-- at://thunderstorm.notjack.space/space.notjack.thunderstorm.catalogSnapshot (read-write)
+- at://{THUNDERSTORM_DID}/space.notjack.thunderstorm.catalogSnapshot (read-write)
+
+It can be configured via the following environment variables:
+
+- `THUNDERSTORM_DID`: the DID of the central Thunderstorm account
+- `THUNDERSTORM_DID_APP_PASSWORD_FILE_PATH`: an absolute path to a file containing an app password that the service can use to publish writes under the Thunderstorm account