From d42ecc13cc0d6c4fe9de3dc8202423a140154b6d Mon Sep 17 00:00:00 2001
From: admin <alec@bryanmail.net>
Date: Sat, 20 Jun 2026 23:22:44 -0700
Subject: [PATCH] Add n8n secrets reference

---
 secrets/n8n.secrets.example | 49 +++++++++++++++++++++++++++++++++++++
 1 file changed, 49 insertions(+)
 create mode 100644 secrets/n8n.secrets.example

diff --git a/secrets/n8n.secrets.example b/secrets/n8n.secrets.example
new file mode 100644
index 0000000..aacd7c5
--- /dev/null
+++ b/secrets/n8n.secrets.example
@@ -0,0 +1,49 @@
+# n8n Stack — Secrets Reference
+# Source: n8n.env
+#
+# Add SECRET values to Woodpecker at:
+#   https://woodpecker.bryanmail.net
+#   homelab/compose-files → Settings → Secrets
+
+# ── SECRETS (add to Woodpecker) ───────────────────────────────────────────────
+
+# Woodpecker secret name:  n8n_db_password
+# Used for:               n8n PostgreSQL database password
+# Env var in .env:        DB_POSTGRESDB_PASSWORD
+n8n_db_password=
+
+# Woodpecker secret name:  n8n_encryption_key
+# Used for:               n8n credential encryption key
+#                         WARNING: Changing this breaks all saved credentials
+# Env var in .env:        N8N_ENCRYPTION_KEY
+n8n_encryption_key=
+
+# ── NON-SECRETS (safe in compose file or .env) ────────────────────────────────
+
+# DOMAIN_NAME                    Top level domain
+# SUBDOMAIN                      Subdomain for n8n
+# GENERIC_TIMEZONE               Timezone
+# SSL_EMAIL                      ACME email
+# DB_TYPE                        Database type (postgresdb)
+# DB_POSTGRESDB_DATABASE         Database name (n8n)
+# DB_POSTGRESDB_HOST             PostgreSQL hostname
+# DB_POSTGRESDB_PORT             PostgreSQL port
+# DB_POSTGRESDB_USER             Database username (n8n)
+# DB_POSTGRESDB_SCHEMA           Schema name (n8n)
+# N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS  Boolean flag
+# N8N_HOST                       n8n hostname (derived from SUBDOMAIN.DOMAIN_NAME)
+# N8N_PORT                       n8n port (5678)
+# N8N_PROTOCOL                   Protocol (https)
+# NODE_ENV                       Runtime env (production)
+# WEBHOOK_URL                    Webhook base URL
+# TZ                             Timezone
+# N8N_DIAGNOSTICS_ENABLED        Boolean flag (false)
+# N8N_VERSION_NOTIFICATIONS_ENABLED  Boolean flag (false)
+# N8N_TEMPLATES_ENABLED          Boolean flag (false)
+
+# ── Woodpecker provision-secrets case entry ───────────────────────────────────
+#
+#   n8n)
+#     create_or_update_secret "n8n_db_password"    "$N8N_DB_PASSWORD"
+#     create_or_update_secret "n8n_encryption_key" "$N8N_ENCRYPTION_KEY"
+#     ;;