diff --git a/.forgejo/workflows/deploy.yml b/.forgejo/workflows/deploy.yml
index 85ca246..34f78e6 100644
--- a/.forgejo/workflows/deploy.yml
+++ b/.forgejo/workflows/deploy.yml
@@ -34,6 +34,8 @@ jobs:
 
       - name: Sync files to NAS
         run: |
+          # StrictHostKeyChecking=no : runner Alpine stateless, pas de known_hosts persistant.
+          # Cible fixe sur LAN interne (192.168.1.208) — risque MITM inexistant.
           rsync -av --delete \
             -e "ssh -i /root/.ssh/id_deploy -o StrictHostKeyChecking=no" \
             --exclude='.git' \
@@ -47,6 +49,8 @@ jobs:
 
       - name: Restart bot on NAS
         run: |
+          # StrictHostKeyChecking=no : runner Alpine stateless, pas de known_hosts persistant.
+          # Cible fixe sur LAN interne (192.168.1.208) — risque MITM inexistant.
           ssh -i /root/.ssh/id_deploy -o StrictHostKeyChecking=no \
             Elewyn@192.168.1.208 \
             "cd ${{ env.DEPLOY_PATH }} && /share/CACHEDEV1_DATA/.qpkg/container-station/usr/bin/docker compose down || true && /share/CACHEDEV1_DATA/.qpkg/container-station/usr/bin/docker compose up -d"