Some script fixes

migration/README.md

@@ -73,7 +73,7 @@ set to `new_password` and any `aliases`), so re-running after edits is safe.
 Linux:
 
 ```bash
-export STALWART_URL="https://mail.eternityproject.fi"
+export STALWART_URL="http://127.0.0.1:8081"
 export STALWART_USER="admin"
 export STALWART_PASSWORD="<admin password>"
 
@@ -84,7 +84,7 @@ stalwart-cli apply --file accounts-plan.ndjson
 Windows:
 
 ```powershell
-$env:STALWART_URL = "https://mail.eternityproject.fi"
+$env:STALWART_URL = "http://localhost:8081"
 $env:STALWART_USER = "admin"
 $env:STALWART_PASSWORD = "<admin password>"
 
@@ -92,6 +92,14 @@ stalwart-cli apply --file accounts-plan.ndjson --dry-run
 stalwart-cli apply --file accounts-plan.ndjson
 ```
 
+Use the permanent administrator username and password created in the Stalwart setup UI, not a mailbox login. The default Compose deployment binds the administration API only to the local host, so `https://mail.eternityproject.fi` is not the CLI endpoint unless you have separately configured a reverse proxy for it. Confirm the CLI can reach and authenticate to the local API before applying a real plan:
+
+```powershell
+stalwart-cli apply --url http://localhost:8081 --user admin --file accounts-plan.ndjson --dry-run
+```
+
+The command prompts for the password when `STALWART_PASSWORD` and `--password` are omitted. If the command says `authentication failed`, reset or use the correct permanent administrator password in the Stalwart WebUI. If it says `failed to connect`, verify `docker compose ps stalwart` and use `http://localhost:8081` on Docker Desktop or `http://127.0.0.1:8081` directly on the Linux server.
+
 ## 5. Copy mail with imapsync
 
 The sync scripts use the upstream `gilleslamiral/imapsync` Docker image. The first