From 89831d600bd96af19601b7327fce05760c948820 Mon Sep 17 00:00:00 2001
From: Miguel Jacq <mig@mig5.net>
Date: Sun, 21 Jun 2026 12:49:20 +1000
Subject: [PATCH] enroll diff --enforce can take --target for specific config
 managers

---
 src/content/docs.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/content/docs.html b/src/content/docs.html
index 58af7fc..7bea6e3 100644
--- a/src/content/docs.html
+++ b/src/content/docs.html
@@ -359,7 +359,7 @@ ignore_package_versions = true
 
           <div class="callout p-4 mb-3">
             <div class="fw-semibold mb-1">Optional: enforce the old harvest state (<code>--enforce</code>)</div>
-            <div class="small text-secondary mb-0">If drift exists and <code>ansible-playbook</code> is on <code>PATH</code>, Enroll can generate a manifest from the <em>old</em> harvest and apply it locally to restore expected state. It avoids package downgrades, and will often run Ansible with <code>--tags role_...</code> so only the roles implicated by the drift are applied. This is intentionally Ansible-based today, even when you also use Puppet or Salt rendering for normal manifests.</div>
+	    <div class="small text-secondary mb-0">If drift exists and your desired config manager is on <code>$PATH</code>, Enroll can generate a manifest from the <em>old</em> harvest and apply it locally to restore expected state, if you pass the <code>--enforce</code> argument to <code>enroll diff</code>. By default, it will try to use Ansible for that, but you can pass <code>--target [puppet|sops]</code> just like with <code>enroll manifest</code>.</div>
           </div>
 
           <div class="terminal mb-4">