diff --git a/client/src/Validation/monitor.ts b/client/src/Validation/monitor.ts
index f8ec5c322..8a2b6e726 100644
--- a/client/src/Validation/monitor.ts
+++ b/client/src/Validation/monitor.ts
@@ -128,9 +128,9 @@ const dockerSchema = baseSchema.extend({
 	ignoreTlsErrors: z.boolean(),
 	dockerTlsCa: z.string(),
 	dockerTlsCert: z.string(),
-	// Never prefilled; blank on edit keeps the stored key.
+	// blank on edit keeps the stored key.
 	dockerTlsKey: z.string(),
-	// Read-only mirror of the server flag; stripped by the server on submit.
+	// Read only mirror of the server flag, stripped on submit
 	dockerTlsKeySet: z.boolean(),
 	dockerLogsEnabled: z.boolean().register(monitorStepRegistry, { step: 1 }),
 });
diff --git a/server/src/service/network/DockerProvider.ts b/server/src/service/network/DockerProvider.ts
index 71fd4a618..aa8070649 100644
--- a/server/src/service/network/DockerProvider.ts
+++ b/server/src/service/network/DockerProvider.ts
@@ -30,7 +30,6 @@ import { DOCKER_TLS_URL, isDockerTlsUrl } from "@/utils/dockerHost.js";
 import { splitCertificateBundle } from "@/utils/pem.js";
 
 type DockerodeType = typeof Dockerode;
-// @types/dockerode omits agent and connectionTimeout; docker-modem forwards both
 type DockerOptions = Dockerode.DockerOptions & { agent?: https.Agent; connectionTimeout?: number };
 type TlsCredentials = { ok: true; key: string } | { ok: false; message: string };