From 37cfa353c5e0518f6640588f8845b309b6a6d2e4 Mon Sep 17 00:00:00 2001
From: anti <samuel@securejump.cl>
Date: Sat, 18 Apr 2026 20:31:20 -0400
Subject: [PATCH] docs(swarm): fix forwarder flag name (--log-file not
 --log-path)

The forwarder takes --log-file; --log-path is the listener flag. Caught
by ANTI running the command from the worker bootstrap section verbatim
and getting 'No such option: --log-path Did you mean --log-file?'.
---
 SWARM-Mode.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/SWARM-Mode.md b/SWARM-Mode.md
index 435e39f..d388f7f 100644
--- a/SWARM-Mode.md
+++ b/SWARM-Mode.md
@@ -190,7 +190,7 @@ sudo decnet agent --daemon \
 decnet forwarder --daemon \
      --master-host 192.168.1.13-master-ip \
      --master-port 6514 \
-     --log-path /var/log/decnet/decnet.log \
+     --log-file /var/log/decnet/decnet.log \
      --state-db ~/.decnet/agent/forwarder.db \
      --agent-dir /home/anti/.decnet/agent
 ```
@@ -296,7 +296,7 @@ Worker-side control-plane daemon. FastAPI on HTTPS with
 
 ### `decnet forwarder`
 
-Worker-side log shipper. Tails `--log-path` (default:
+Worker-side log shipper. Tails `--log-file` (default:
 `DECNET_INGEST_LOG_FILE`, i.e. the same file the local collector writes),
 frames each line per RFC 5425 octet-counting, and writes it to
 master:6514 over mTLS. Offset state is persisted in SQLite so a master
@@ -305,8 +305,8 @@ crash is recoverable without data loss.
 ```
 --master-host <ip>     Master IP. env: DECNET_SWARM_MASTER_HOST
 --master-port <int>    Listener port. default: 6514
---log-path <path>      File to tail. default: DECNET_INGEST_LOG_FILE
---state-db <path>      Offset SQLite. default: ~/.decnet/agent/forwarder.db
+--log-file <path>      File to tail. default: DECNET_INGEST_LOG_FILE
+--state-db <path>      Offset SQLite. default: <agent-dir>/forwarder.db
 --agent-dir <path>     Bundle dir. default: ~/.decnet/agent
 --poll-interval <sec>  File tail interval. default: 0.5
 --daemon / -d          Detach to background.