diff --git a/lg.cfg b/lg.cfg
index 14a654a..4d120ea 100644
--- a/lg.cfg
+++ b/lg.cfg
@@ -5,7 +5,7 @@ LOG_LEVEL="WARNING"
 
 DOMAIN = "tetaneutral.net"
 
-# Used for restrict access on lgproxy - must be same in lgproxy.cfg
+# Used to optionally restrict access to lgproxy based on a shared secret.
 SHARED_SECRET="ThisTokenIsNotSecret"
 
 BIND_IP = "0.0.0.0"
diff --git a/lgproxy.cfg b/lgproxy.cfg
index 7019e52..e4b08f8 100644
--- a/lgproxy.cfg
+++ b/lgproxy.cfg
@@ -7,10 +7,12 @@ LOG_LEVEL="WARNING"
 BIND_IP = "0.0.0.0"
 BIND_PORT = 5000
 
-# Used for restrict access on lgproxy - Empty list = all allowed
+# Used to restrict access to lgproxy based on source IP address.
+# Empty list = any IP is allowed to run queries.
 ACCESS_LIST = ["91.224.149.206", "178.33.111.110", "2a01:6600:8081:ce00::1"]
 
-# Used for restrict access on lgproxy - Must be same in lg.cfg
+# Used to restrict access to lgproxy based on a shared secret (must also be configured in lg.cfg)
+# Empty string or unset = no shared secret is required to run queries.
 SHARED_SECRET="ThisTokenIsNotSecret"
 
 IPV4_SOURCE=""