Document Nextcloud deployment and Infisical secrets

gitea/README.md

@@ -90,7 +90,7 @@ POSTGRES_ROOT_PASSWORD
 Stored in:
 
 ```text
-/srv/secrets/company.env
+Infisical
 ```
 
 Future improvement:
@@ -229,7 +229,7 @@ Labels:
 * `ubuntu-24.04`
 * `ubuntu-22.04`
 
-The runner registration token is loaded from `GITEA_RUNNER_REGISTRATION_TOKEN` in `/srv/secrets/company.env`.
+The runner registration token is loaded from `GITEA_RUNNER_REGISTRATION_TOKEN` in Infisical through `slcompose`.
 
 ### Package Publishing
 
@@ -244,7 +244,7 @@ The publishing credential is stored as the repository Actions secret `BAGET_API_
 Gitea and its Actions runner use infrastructure secrets stored in:
 
 ```text
-/srv/secrets/company.env
+Infisical
 ```
 
 Variables:
@@ -340,7 +340,7 @@ gitea
 ### Secrets
 
 ```text
-/srv/secrets/company.env
+Infisical service paths for Gitea and the Gitea runner
 ```
 
 Without these items, a complete restoration is not possible.
@@ -353,7 +353,7 @@ To restore Gitea:
 
 1. Restore PostgreSQL database.
 2. Restore Gitea data directory.
-3. Restore company.env secrets.
+3. Restore or reauthorize Infisical access and service secret paths.
 4. Deploy Docker Compose stack.
 5. Verify SMTP configuration.
 6. Verify SSH access.