diff --git a/SECRETS.md b/SECRETS.md
index 89afebc..a4dfcb8 100644
--- a/SECRETS.md
+++ b/SECRETS.md
@@ -14,3 +14,8 @@
 # 2. Select repository: homelab/compose-files
 # 3. Settings → Secrets
 # 4. Add SSH_KEY and TEAMS_WEBHOOK
+
+# ai stack secrets (added 2026-08-25, see PR #4):
+#   ai_aws_access_key_id, ai_aws_secret_access_key, ai_litellm_master_key,
+#   ai_litellm_salt_key, ai_litellm_db_password, ai_webui_secret_key,
+#   ai_open_webui_database_url, ai_oauth_client_secret