diff --git a/docker/ss-atlas/templates/stack-template.yml b/docker/ss-atlas/templates/stack-template.yml
index 42aaad8..0f33c68 100644
--- a/docker/ss-atlas/templates/stack-template.yml
+++ b/docker/ss-atlas/templates/stack-template.yml
@@ -1,3 +1,22 @@
+# =============================================================================
+# CUSTOMER STACK TEMPLATE
+# =============================================================================
+# This is the Docker Swarm stack that gets deployed for each paying customer.
+# It defines what product/service they receive when they subscribe.
+#
+# REPLACE the `web` service image (currently traefik/whoami as a placeholder)
+# with the actual application you are selling.
+#
+# Template variables (injected at deploy time by swarm/client.go):
+#   {{.ID}}             - customer's username (used for unique resource naming)
+#   {{.Subdomain}}      - customer's subdomain (same as ID by default)
+#   {{.Domain}}         - base domain (e.g. bc.a250.ca)
+#   {{.TraefikNetwork}} - Traefik overlay network name
+#
+# Each customer gets their stack at: https://{{.Subdomain}}.{{.Domain}}
+# Access is restricted to the owning user via Authelia forward-auth.
+# =============================================================================
+
 version: "3.8"
 
 services:
diff --git a/scripts/deploy-stack-dev.sh b/scripts/deploy-stack-dev.sh
index d21982f..a66adc8 100755
--- a/scripts/deploy-stack-dev.sh
+++ b/scripts/deploy-stack-dev.sh
@@ -30,5 +30,9 @@ docker compose build \
 echo "=== Deploying stack ==="
 docker stack deploy -c stack.yml atlas
 
+echo "=== Force-updating local images ==="
+docker service update --force --image atlas-ss-atlas:latest atlas_ss-atlas
+docker service update --force --image git.nixc.us/a250/authelia:dev-authelia atlas_authelia
+
 echo ""
 echo "=== Ready. Visit https://app.bc.a250.ca ==="