Correct setup and server operation guidance

docker/.env.example

@@ -34,9 +34,9 @@ ACME_EMAIL=you@yourdomain.com
 # PROFILE: tailscale  (--profile tailscale)
 # =============================================================================
 
-# Tailscale OAuth key (not a regular auth key — must be OAuth for persistent use)
-# Generate at: https://login.tailscale.com/admin/settings/oauth
-# Scopes needed: devices:write
+# Tailscale authentication key for this container.
+# OAuth clients require their own scopes and tag configuration; see:
+# https://tailscale.com/docs/features/containers/docker/docker-params#ts_authkey
 TS_AUTHKEY=tskey-auth-xxxxxxxxxxxxxxxx-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
 
 # Hostname this node will have on your tailnet (becomes <hostname>.<tailnet>.ts.net)
@@ -47,6 +47,6 @@ TS_HOSTNAME=livesync
 # =============================================================================
 
 # Tunnel token from Cloudflare Zero Trust dashboard
-# Create at: https://one.dash.cloudflare.com/ → Networks → Tunnels → Create tunnel
+# Current setup guide: https://developers.cloudflare.com/tunnel/get-started/
 # Copy the token from the "Install connector" step
 CF_TUNNEL_TOKEN=eyJhIjoixxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx