Add auth secrets reference

secrets/auth.secrets.example

@@ -0,0 +1,38 @@
+# auth Stack — Secrets Reference
+# Source: auth.env
+#
+# Add SECRET values to Woodpecker at:
+#   https://woodpecker.bryanmail.net
+#   homelab/compose-files → Settings → Secrets
+
+# ── SECRETS (add to Woodpecker) ───────────────────────────────────────────────
+
+# Woodpecker secret name:  auth_pg_password
+# Used for:               Authentik PostgreSQL password (PGadmin user)
+# Env var in .env:        AUTHENTIK_POSTGRESQL__PASSWORD
+auth_pg_password=
+
+# Woodpecker secret name:  auth_secret_key
+# Used for:               Authentik secret key for session signing and crypto
+# Env var in .env:        AUTHENTIK_SECRET_KEY
+auth_secret_key=
+
+# Woodpecker secret name:  auth_pg_password2
+# Used for:               Authentik app-level PostgreSQL password (Authentik user)
+# Env var in .env:        AUTHENTIK_POSTGRESQL__PASSWORD2
+auth_pg_password2=
+
+# ── NON-SECRETS (safe in compose file or .env) ────────────────────────────────
+
+# AUTHENTIK_POSTGRESQL__HOST      PostgreSQL hostname (postgresql)
+# AUTHENTIK_POSTGRESQL__USER      PostgreSQL superuser (PGadmin)
+# AUTHENTIK_POSTGRESQL__NAME      Database name (authentik)
+# AUTHENTIK_POSTGRESQL__USER2     Authentik app user (Authentik)
+
+# ── Woodpecker provision-secrets case entry ───────────────────────────────────
+#
+#   auth)
+#     create_or_update_secret "auth_pg_password"  "$AUTH_PG_PASSWORD"
+#     create_or_update_secret "auth_secret_key"   "$AUTH_SECRET_KEY"
+#     create_or_update_secret "auth_pg_password2" "$AUTH_PG_PASSWORD2"
+#     ;;