diff --git a/MEMORY.md b/MEMORY.md
index 1169197..1a34d1e 100644
--- a/MEMORY.md
+++ b/MEMORY.md
@@ -688,12 +688,14 @@ rows to a configured sheet. Config UI lives in
 - `SMARTSHEET_CRON_SECRET` — optional bearer for the cron route.
 - `SMARTSHEET_SYNC_TIMEOUT_MS` — optional, default 8000.
 
-**Migration push (Vercel deploy + manual):**
+**Migration push (Gitea deploy + manual):**
 ```bash
 npm run migrate:one 93   # pushes 0093_water_smartsheet_sync.sql
 ```
-Then provision the encryption key in Vercel dashboard:
+Then provision the encryption key in **Gitea repository secrets**
+(`Settings → Secrets and variables → Actions → Secrets`):
 `SMARTSHEET_TOKEN_ENC_KEY` (paste the `openssl rand -base64 32` output).
+Optionally also set `SMARTSHEET_CRON_SECRET`.
 
 **Rollback story:**
 1. Remove the cron entry from `vercel.json`.