diff --git a/secrets/gamma.secrets.example b/secrets/gamma.secrets.example
new file mode 100644
index 0000000..b7dfda0
--- /dev/null
+++ b/secrets/gamma.secrets.example
@@ -0,0 +1,25 @@
+# gamma Stack — Secrets Reference
+# Source: gamma.env
+#
+# Add SECRET values to Woodpecker at:
+#   https://woodpecker.bryanmail.net
+#   homelab/compose-files → Settings → Secrets
+
+# ── SECRETS (add to Woodpecker) ───────────────────────────────────────────────
+
+# Woodpecker secret name:  gamma_auth_token
+# Used for:               Traefik log dashboard auth token and agent API token
+#                         NOTE: Both TRAEFIK_LOG_DASHBOARD_AUTH_TOKEN and
+#                         AGENT_API_TOKEN use the same value in this stack
+# Env var in .env:        TRAEFIK_LOG_DASHBOARD_AUTH_TOKEN / AGENT_API_TOKEN
+gamma_auth_token=
+
+# ── NON-SECRETS (safe in compose file or .env) ────────────────────────────────
+
+# TRAFFIC_HOST     Traefik hostname (traffic.bryanmail.net)
+
+# ── Woodpecker provision-secrets case entry ───────────────────────────────────
+#
+#   gamma)
+#     create_or_update_secret "gamma_auth_token" "$GAMMA_AUTH_TOKEN"
+#     ;;