diff --git a/.env.production.example b/.env.production.example
index 4a21816..98130d1 100644
--- a/.env.production.example
+++ b/.env.production.example
@@ -18,8 +18,8 @@ FAMAPP_DB_PASSWORD=replace-with-strong-password
 FAMAPP_DB_NAME=famapp
 
 # Auth.js session secret — generate with: openssl rand -base64 32
-# NOTE: the monolith .env also uses AUTH_SECRET for Reactive Resume.
-# Docker Compose uses the last occurrence. Keep famapp's entry last.
+# NOTE: Reactive Resume uses RESUME_AUTH_SECRET; AUTH_SECRET is famapp-only.
+
 AUTH_SECRET=replace-with-openssl-rand-base64-32
 
 # OIDC provider (Authentik) — fill in after bootstrapping Authentik