diff --git a/woodpecker/README.md b/woodpecker/README.md
index 0367159..1569c2c 100644
--- a/woodpecker/README.md
+++ b/woodpecker/README.md
@@ -10,6 +10,9 @@ kubectl create secret generic -n woodpecker woodpecker-secret \
   --from-literal=WOODPECKER_AGENT_SECRET=$(openssl rand -hex 32) \
   --from-literal=WOODPECKER_GITEA_CLIENT=... \
   --from-literal=WOODPECKER_GITEA_SECRET=...
+kubectl create secret generic -n woodpecker woodpecker-secret-github \
+  --from-literal=WOODPECKER_GITHUB_CLIENT=... \
+  --from-literal=WOODPECKER_GITHUB_SECRET=...
 kubectl create secret generic -n woodpecker-execution woodpecker-secret \
   --from-literal=WOODPECKER_AGENT_SECRET=$(kubectl get secret -n woodpecker woodpecker-secret -o jsonpath="{.data.WOODPECKER_AGENT_SECRET}" | base64 -d)
 kubectl apply -n woodpecker -f woodpecker-server.yml
diff --git a/woodpecker/woodpecker-server.yml b/woodpecker/woodpecker-server.yml
index 0b72e06..43636b6 100644
--- a/woodpecker/woodpecker-server.yml
+++ b/woodpecker/woodpecker-server.yml
@@ -88,6 +88,18 @@ spec:
                 secretKeyRef:
                   name: woodpecker-secret
                   key: WOODPECKER_GITEA_SECRET
+            - name: WOODPECKER_GITHUB # https://woodpecker-ci.org/docs/administration/forges/github
+              value: "true"
+            - name: WOODPECKER_GITHUB_CLIENT
+              valueFrom:
+                secretKeyRef:
+                  name: woodpecker-secret-github
+                  key: WOODPECKER_GITHUB_CLIENT
+            - name: WOODPECKER_GITHUB_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: woodpecker-secret-github
+                  key: WOODPECKER_GITHUB_SECRET
             - name: "WOODPECKER_AGENT_SECRET"
               valueFrom:
                 secretKeyRef: