diff --git a/entrypoint.sh b/entrypoint.sh
index f0f6ff1..8030ea6 100644
--- a/entrypoint.sh
+++ b/entrypoint.sh
@@ -2,5 +2,7 @@
 set -eu
 
 # Inject secrets from Doppler (project/config implied by DOPPLER_TOKEN service token).
-# --fallback keeps restarts working if api.doppler.com is briefly unreachable.
+# --fallback keeps restarts working if api.doppler.com is briefly unreachable: doppler
+# itself writes/refreshes this encrypted file on every successful fetch (it need not
+# pre-exist) and only reads it when the API is unreachable.
 exec doppler run --fallback /opt/api-server/doppler-fallback.json -- java -jar api-server.jar