diff --git a/infra/garibaldi-central.levant.nomad b/infra/garibaldi-central.levant.nomad
index cbecf33343ef562adcf50021b90eee31427680a3..4110c3faa025c9b3cb01d21b313bf014ca047cdb 100644
--- a/infra/garibaldi-central.levant.nomad
+++ b/infra/garibaldi-central.levant.nomad
@@ -8,7 +8,6 @@ job "daily-backup-grafana-to-s3" {
   }
 
   group "garibaldi" {
-
     vault {
       policies = ["default"]
     }
@@ -26,6 +25,11 @@ job "daily-backup-grafana-to-s3" {
         GRAFANA_URL = "https://monitoring.lofar.net:443"
       }
 
+      # Note: the Grafana service account token needs to be recreated if Grafana is redeployed:
+      #   1. Create an Admin service account at https://monitoring.lofar.net/org/serviceaccounts/
+      #   2. Create a service account token for that account
+      #   3. Upload the token to vault at https://vault.lofar.net/ui/vault/secrets/kv-v2/kv/grafana%2Fgaribaldi
+
       template {
         env = true
         destination = "secrets/file.env"
@@ -40,4 +44,4 @@ job "daily-backup-grafana-to-s3" {
       }
     }
   }
-}
\ No newline at end of file
+}