From 9ac3f3f8602aa45c0f3ef7c3a708ed13e91cc095 Mon Sep 17 00:00:00 2001
From: admin <alec@bryanmail.net>
Date: Sat, 20 Jun 2026 23:21:51 -0700
Subject: [PATCH] Add mealie secrets reference

---
 secrets/mealie.secrets.example | 39 ++++++++++++++++++++++++++++++++++
 1 file changed, 39 insertions(+)
 create mode 100644 secrets/mealie.secrets.example

diff --git a/secrets/mealie.secrets.example b/secrets/mealie.secrets.example
new file mode 100644
index 0000000..2aa3ace
--- /dev/null
+++ b/secrets/mealie.secrets.example
@@ -0,0 +1,39 @@
+# mealie Stack — Secrets Reference
+# Source: mealie.env
+#
+# Add SECRET values to Woodpecker at:
+#   https://woodpecker.bryanmail.net
+#   homelab/compose-files → Settings → Secrets
+
+# ── SECRETS (add to Woodpecker) ───────────────────────────────────────────────
+
+# Woodpecker secret name:  mealie_db_password
+# Used for:               Mealie PostgreSQL database password
+# Env var in .env:        POSTGRES_PASSWORD
+mealie_db_password=
+
+# Woodpecker secret name:  mealie_ldap_query_password
+# Used for:               LDAP service account password for user lookups
+# Env var in .env:        LDAP_QUERY_PASSWORD
+mealie_ldap_query_password=
+
+# ── NON-SECRETS (safe in compose file or .env) ────────────────────────────────
+
+# PUID, PGID             Process UID/GID
+# BASE_URL               Mealie public URL
+# POSTGRES_USER          Database username (mealie)
+# POSTGRES_SERVER        PostgreSQL hostname
+# POSTGRES_PORT          PostgreSQL port (5432)
+# POSTGRES_DB            Database name (mealie-v1)
+# LDAP_SERVER_URL        LDAP server URL
+# LDAP_BASE_DN           LDAP base distinguished name
+# LDAP_QUERY_BIND        LDAP service account DN
+# LDAP_ADMIN_FILTER      LDAP admin group filter
+# MEALIE_HOST            Traefik hostname
+
+# ── Woodpecker provision-secrets case entry ───────────────────────────────────
+#
+#   mealie)
+#     create_or_update_secret "mealie_db_password"        "$MEALIE_DB_PASSWORD"
+#     create_or_update_secret "mealie_ldap_query_password" "$MEALIE_LDAP_QUERY_PASSWORD"
+#     ;;