diff --git a/api/docker-compose.prod.yaml b/api/docker-compose.prod.yaml
index 8713cdc..249fb2d 100644
--- a/api/docker-compose.prod.yaml
+++ b/api/docker-compose.prod.yaml
@@ -9,6 +9,8 @@ services:
     environment:
       ConnectionStrings__DefaultConnection: Host=agologum-db;Port=5432;Database=agologum;Username=agologum;Password=${POSTGRES_PASSWORD}
       Jwt__Key: ${JWT_SECRET} # must export the secret as a variable in the ci script
+      # a better option is to seed a .env file in the ci script from the gitea secrets
+      # then import that file into the container
     ports:
       - "5000:5000"
     networks: