docs: simplify architecture diagram

README.md

@@ -10,38 +10,11 @@ Supported cloud providers:
 
 ## How it works
 
-```mermaid
-flowchart TD
-    A[cloud-secrets starts] --> B[Load config from env vars]
-    B --> C["Create Docker Swarm<br/>and Cloud clients"]
-    C --> E[Application sync loop]
-
-    F[Trigger by timer] --> E
-    Q[Trigger by SIGHUP] --> E
-
-    E --> G[Read secrets from Cloud]
-    E --> H[Read secrets from Swarm]
-    G --> I["Compare by logical path<br/>and external version id"]
-    H --> I
-
-    I --> J{Secret state in Swarm}
-    J -->|not exists| K[Create new Swarm secret]
-    J -->|version changed| L[Create new secret version]
-    J -->|same version| M[Skip]
-
-    L --> N["Update services to use new secret ID"]
-    N --> R[Rolls updated service tasks]
-    R --> O[Remove old versions]
-    O --> S[Restore parent secret]
-    S --> T["Reload Swarm state"]
-    T --> U{"CS_CLEANUP_ORPHANED=true"}
-    U -->|yes| V["Remove managed secrets absent in Cloud<br/>and unused by services, with all versions"]
-    U -->|no| P
-
-    K --> P[Write sync result logs]
-    V --> P
-    M --> P
-```
+<p align="center">
+  <img src="./docs/architecture-overview.svg" alt="External Secret Manager → cloud-secrets → Docker Secrets → Swarm Services" width="760" />
+</p>
+
+See [Architecture](./docs/architecture.md) for the full synchronization lifecycle.
 
 ## Design goals
 

docs/architecture.md

@@ -0,0 +1,40 @@
+# Architecture
+
+**cloud-secrets** continuously synchronizes secrets from an external secret manager into Docker Swarm, creates versioned Docker Secrets when values change, and rolls affected services onto the new secret version.
+
+The diagram below shows the full synchronization lifecycle.
+
+```mermaid
+flowchart TD
+    A[cloud-secrets starts] --> B[Load config from env vars]
+    B --> C["Create Docker Swarm<br/>and Cloud clients"]
+    C --> E[Application sync loop]
+
+    F[Trigger by timer] --> E
+    Q[Trigger by SIGHUP] --> E
+
+    E --> G[Read secrets from Cloud]
+    E --> H[Read secrets from Swarm]
+    G --> I["Compare by logical path<br/>and external version id"]
+    H --> I
+
+    I --> J{Secret state in Swarm}
+    J -->|not exists| K[Create new Swarm secret]
+    J -->|version changed| L[Create new secret version]
+    J -->|same version| M[Skip]
+
+    L --> N["Update services to use new secret ID"]
+    N --> R[Rolls updated service tasks]
+    R --> O[Remove old versions]
+    O --> S[Restore parent secret]
+    S --> T["Reload Swarm state"]
+    T --> U{"CS_CLEANUP_ORPHANED=true"}
+    U -->|yes| V["Remove managed secrets absent in Cloud<br/>and unused by services, with all versions"]
+    U -->|no| P
+
+    K --> P[Write sync result logs]
+    V --> P
+    M --> P
+```
+
+[Back to README](../README.md)