diff --git a/CLAUDE.md b/CLAUDE.md
index ab568f2b..3324a96f 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -117,10 +117,19 @@ Access Key: cannabrands-app
 Secret Key: cdbdcd0c7b6f3994d4ab09f68eaff98665df234f
 ```
 
+**Gitea Container Registry** (for CI image pushes)
+```
+Registry:   git.spdy.io
+User:       kelly@spdy.io
+Token:      c89fa0eeb417343b171f11de6b8e4292b2f50e2b
+Scope:      write:package
+```
+Woodpecker secrets: `registry_user`, `registry_password`
+
 **CI/CD Notes:**
 - Uses **Kaniko** for Docker builds (no Docker daemon, avoids DNS issues)
-- Base images pre-cached in local registry - run `docker/scripts/sync-base-images.sh` to update
-- CI tests use ephemeral postgres container for isolation (not shared dev DB)
+- Images pushed to `git.spdy.io/cannabrands/hub` (k8s can pull without insecure config)
+- Base images pulled from local registry `10.100.9.70:5000` (Kaniko handles insecure)
 - Deploy: `develop` → dev.cannabrands.app, `master` → cannabrands.app
 
 ### 8. User-Business Relationship (Pivot Table)