diff --git a/secrets/meshcentral.secrets.example b/secrets/meshcentral.secrets.example
new file mode 100644
index 0000000..63643c1
--- /dev/null
+++ b/secrets/meshcentral.secrets.example
@@ -0,0 +1,25 @@
+# meshcentral Stack — Secrets Reference
+# Source: meshcentral.env
+#
+# Add SECRET values to Woodpecker at:
+#   https://woodpecker.bryanmail.net
+#   homelab/compose-files → Settings → Secrets
+
+# ── SECRETS (add to Woodpecker) ───────────────────────────────────────────────
+
+# Woodpecker secret name:  meshcentral_backup_password
+# Used for:               MeshCentral backup encryption password
+# Env var in .env:        BACKUPS_PW
+meshcentral_backup_password=
+
+# ── NON-SECRETS (safe in compose file or .env) ────────────────────────────────
+
+# HOSTNAME          MeshCentral public hostname
+# REVERSE_PROXY     Trusted reverse proxy CIDR
+# MESHCENTRAL_HOST  Traefik hostname
+
+# ── Woodpecker provision-secrets case entry ───────────────────────────────────
+#
+#   meshcentral)
+#     create_or_update_secret "meshcentral_backup_password" "$MESHCENTRAL_BACKUP_PASSWORD"
+#     ;;