setup input

README.md

@@ -12,27 +12,27 @@ Start a new PocketBase project (optionally provide a service name via `pb init <
 
 Run the local dev server.
 
+### `deploy`
+
+Syncs `pb_public`, `pb_migrations`, and `pb_hooks`, then restarts the remote PocketBase service. The command will automatically run `setup` if the PocketBase binary isn’t present on the remote.
+
 ### `setup`
 
 Provision a remote PocketBase server. This will:
 
 1. Setup up a firewall.
 2. Install and setup Caddy.
-3. Download pocketbase and configure the `.env`.
-4. Configure the systemd service for the remote instance.
-
-### `deploy`
-
-Syncs `pb_public`, `pb_migrations`, and `pb_hooks`, then restarts the remote PocketBase service. The command will automatically run `setup` if the PocketBase binary isn’t present on the remote.
+3. Download pocketbase and configure remote secrets.
+4. Configure systemd.
 
 ### `logs`
 
 Connects to the configured server and streams `/root/pb/{service}/{service}.log` via `tail -n 100 -F`.
 
-### secrets
+### `secrets`
 
-Manage the remote `/root/pb/{service}/.env` file.
+Manage the remote secrets in `/root/pb/{service}/.env`.
 
-- `pb secrets list` prints every variable name defined in the remote `.env` (comments and empty lines are ignored).
+- `pb secrets list` prints every variable name (comments and empty lines are ignored).
 - `pb secrets set KEY=VALUE [...]` adds or updates one or more key/value pairs while leaving the other file entries untouched.
-- `pb secrets delete KEY [...]` removes the named entries from the remote `.env`.
+- `pb secrets delete KEY [...]` removes the named entries.