- Create .env dynamically from Gitea secrets and variables - Add SECRETS.md with configuration instructions - Use secrets for sensitive data (PG_PASS, AUTHENTIK_SECRET_KEY) - Use variables for non-sensitive config