Sync the self-hosting stack

kubernetes/02-config.yaml

@@ -9,6 +9,7 @@ metadata:
   name: jarvis-api-config
   namespace: jarvis
 data:
+  # Read by the api under this name: the refresh cookie is `Secure` only in production.
   NODE_ENV: "production"
   API_PORT: "4000"
 
@@ -30,7 +31,7 @@ data:
   REDIS_URL: "redis://redis.jarvis.svc.cluster.local:6379"
 
   # Set BOTH or neither. Sentinel needs the sentinels and the name of the primary they watch; a
-  # name is refused rather than defaulted, because ioredis's own default (`mymaster`) against a
+  # name is refused rather than defaulted, because a client's usual default (`mymaster`) against a
   # primary called anything else is not an error — it is a pod that never becomes ready, silently.
   # When these are set, REDIS_URL above is ignored. They name what `08-redis-sentinel.yaml` deploys:
   # its three sentinels, and `jarvis`, the primary they monitor.