Add traefik secrets reference

secrets/traefik.secrets.example

@@ -0,0 +1,34 @@
+# traefik Stack — Secrets Reference
+# Source: traefik.env
+#
+# Add SECRET values to Woodpecker at:
+#   https://woodpecker.bryanmail.net
+#   homelab/compose-files → Settings → Secrets
+#
+# ⚠️  HIGH RISK: Traefik is the entry point for all homelab services.
+#     If this stack fails, nothing is reachable from outside.
+#     Migrate carefully. The Keepalived VIP (192.168.4.30) depends on this stack.
+
+# ── SECRETS (add to Woodpecker) ───────────────────────────────────────────────
+
+# Woodpecker secret name:  traefik_keepalived_password
+# Used for:               Keepalived VRRP authentication password
+#                         Must match across all 3 nodes (docker-1, docker-2, docker-3)
+# Env var in .env:        KEEPALIVED_PASSWORD
+traefik_keepalived_password=
+
+# ── NON-SECRETS (safe in compose file or .env) ────────────────────────────────
+
+# KEEPALIVED_UNICAST_PEERS     Python2BASH list of peer IPs
+# KEEPALIVED_VIRTUAL_IPS       Python2BASH list of VIP addresses (192.168.4.30)
+# ACME_EMAIL                   Let's Encrypt certificate email
+# TRUSTED_IPS                  Trusted proxy CIDR ranges
+# TRAEFIK_HOST                 Traefik dashboard hostname
+# SPEEDTEST_HOST               Speedtest Traefik hostname
+# WHOAMI_HOST                  Whoami Traefik hostname
+
+# ── Woodpecker provision-secrets case entry ───────────────────────────────────
+#
+#   traefik)
+#     create_or_update_secret "traefik_keepalived_password" "$TRAEFIK_KEEPALIVED_PASSWORD"
+#     ;;