diff --git a/n8n-workflows/01-grafana-alert-ai-gotify-v1.0.json b/n8n-workflows/01-grafana-alert-ai-gotify-v1.0.json
index bef411c..271c7fa 100644
--- a/n8n-workflows/01-grafana-alert-ai-gotify-v1.0.json
+++ b/n8n-workflows/01-grafana-alert-ai-gotify-v1.0.json
@@ -360,4 +360,4 @@
     "name": "Version ba3a4eab",
     "description": ""
   }
-}
\ No newline at end of file
+}
diff --git a/n8n-workflows/01-grafana-alert-ai-gotify-v1.1.json b/n8n-workflows/01-grafana-alert-ai-gotify-v1.1.json
index 964dc6c..f346f37 100644
--- a/n8n-workflows/01-grafana-alert-ai-gotify-v1.1.json
+++ b/n8n-workflows/01-grafana-alert-ai-gotify-v1.1.json
@@ -360,4 +360,4 @@
     "name": "Version ba3a4eab",
     "description": ""
   }
-}
\ No newline at end of file
+}
diff --git a/n8n-workflows/02-rag-ingest-and-query-v1.0.json b/n8n-workflows/02-rag-ingest-and-query-v1.0.json
index 2b60767..75173b3 100644
--- a/n8n-workflows/02-rag-ingest-and-query-v1.0.json
+++ b/n8n-workflows/02-rag-ingest-and-query-v1.0.json
@@ -391,4 +391,4 @@
     "name": "Version 832248e5",
     "description": ""
   }
-}
\ No newline at end of file
+}
diff --git a/n8n-workflows/04-whisper-transcription-v1.0.json b/n8n-workflows/04-whisper-transcription-v1.0.json
index 266a645..83f0f4c 100644
--- a/n8n-workflows/04-whisper-transcription-v1.0.json
+++ b/n8n-workflows/04-whisper-transcription-v1.0.json
@@ -586,4 +586,4 @@
     "name": "Version 20275daf",
     "description": ""
   }
-}
\ No newline at end of file
+}
diff --git a/n8n-workflows/06-web-scrape-summarize-v1.0.json b/n8n-workflows/06-web-scrape-summarize-v1.0.json
index d882e70..bde341c 100644
--- a/n8n-workflows/06-web-scrape-summarize-v1.0.json
+++ b/n8n-workflows/06-web-scrape-summarize-v1.0.json
@@ -585,4 +585,4 @@
     "name": "Version 7476f4df",
     "description": ""
   }
-}
\ No newline at end of file
+}
diff --git a/n8n-workflows/07-git-commit-summarizer-v1.0.json b/n8n-workflows/07-git-commit-summarizer-v1.0.json
index 7c32356..0281587 100644
--- a/n8n-workflows/07-git-commit-summarizer-v1.0.json
+++ b/n8n-workflows/07-git-commit-summarizer-v1.0.json
@@ -207,4 +207,4 @@
     "name": "Version 61fca126",
     "description": ""
   }
-}
\ No newline at end of file
+}
diff --git a/n8n-workflows/08-class-recording-rag-v1.0.json b/n8n-workflows/08-class-recording-rag-v1.0.json
index 4de825e..0a937e5 100644
--- a/n8n-workflows/08-class-recording-rag-v1.0.json
+++ b/n8n-workflows/08-class-recording-rag-v1.0.json
@@ -529,4 +529,4 @@
     "name": "Version d64293a7",
     "description": ""
   }
-}
\ No newline at end of file
+}
diff --git a/scripts/setup-secrets-repo.sh b/scripts/setup-secrets-repo.sh
index e3dbffd..59482b8 100644
--- a/scripts/setup-secrets-repo.sh
+++ b/scripts/setup-secrets-repo.sh
@@ -8,7 +8,7 @@ set -euo pipefail
 GITEA_HTTP_URL="http://10.5.1.6:3000"            # ← local Gitea HTTP port (check TrueNAS app config)
 GITEA_SSH_PORT="2222"                             # ← Gitea SSH port
 GITEA_USER="fizzlepoof"
-GITEA_TOKEN=""  # ← regenerate with write:repository + write:user scopes
+GITEA_TOKEN=""  # ← set this before use; regenerate with write:repository + write:user scopes
 REPO_NAME="homelab-secrets"
 LOCAL_PATH="/mnt/docker-ssd/docker/secrets"
 KEY_EXPORT_PATH="/root/.git-crypt-secrets.key"   # back this up somewhere safe!