diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml
index d2798f3..fdcc925 100644
--- a/.gitea/workflows/release.yml
+++ b/.gitea/workflows/release.yml
@@ -22,8 +22,8 @@ env:
   DOTNET_VERSION: "8.0.x"
   UPSTREAM_REPO: usr_unknown/terraform-provider-dokploy
   UPSTREAM_DIR: dokploy-teraform
-  # Everything below authenticates with the token Gitea injects into every
-  # run, so releasing needs no configured secrets at all.
+  # Cloning and the release itself authenticate with the token Gitea injects
+  # into every run. Publishing packages does not -- see PACKAGES_TOKEN below.
   GITEA_HOST: gitea.coolify.vojtkov.dev
   GITEA_OWNER: usr_unknown