diff --git a/networks.nix b/networks.nix
index bc6b59c..3a73553 100644
--- a/networks.nix
+++ b/networks.nix
@@ -15,6 +15,7 @@
       prefixLength = 24;
     } ];
 
+    # WPA2 pasks are kept secret in /etc/wpa_supplicant.conf
     wireless.enable = true;
     wireless.interfaces = [ "wlan0" ];
   };