diff --git a/README.md b/README.md
index 64f7e6c..6fce597 100644
--- a/README.md
+++ b/README.md
@@ -40,6 +40,7 @@ Static routes for 193.40.103.36/30 have been added in pve nodes to make them com
 - MariaDB*: search for `mysql`, `mariadb`[^mariadb] (replaces MySQL)
 - Postgres*: hardcoded to [harbor/application.yml](harbor/application.yml)
 - Seeded secrets: `kind: SecretClaim` (generates random secret in templated format)
+- Secrets in git: https://git.k-space.ee/secretspace (members personal info, API credentials, see argocd/deploy_key.pub comment)
 
 \* External, hosted directly on [nas.k-space.ee](https://wiki.k-space.ee/en/hosting/storage)
 
diff --git a/argocd/applications/passmower-members.yaml b/argocd/applications/passmower-members.yaml
index 907bb2b..34872ce 100644
--- a/argocd/applications/passmower-members.yaml
+++ b/argocd/applications/passmower-members.yaml
@@ -7,7 +7,7 @@ metadata:
 spec:
   project: k-space.ee
   source:
-    repoURL: 'git@git.k-space.ee:k-space/members.git'
+    repoURL: 'git@git.k-space.ee:secretspace/members.git'
     path: members
     targetRevision: HEAD
   destination:
diff --git a/argocd/deploy_key.pub b/argocd/deploy_key.pub
new file mode 100644
index 0000000..af58ad4
--- /dev/null
+++ b/argocd/deploy_key.pub
@@ -0,0 +1,2 @@
+# used for git.k-space: k-space/kube, secretspace/kube, secretspace/members
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOxYpFf85Vnxw7WNb/V5dtZT0PJ4VbBhdBNscDd8TVv/ argocd.k-space.ee