diff --git a/.env.example b/.env.example
index 3a53e45..3d78b1e 100644
--- a/.env.example
+++ b/.env.example
@@ -14,7 +14,7 @@ UNRAID_SSH_PORT=22                # SSH port (default 22)
 UNRAID_GITEA_PORT=3000            # Port Gitea web UI will listen on
 UNRAID_GITEA_SSH_PORT=2222        # Port for git-over-SSH (host 22 is taken by SSH server)
 UNRAID_GITEA_DATA_PATH=           # Absolute path on NVMe for Gitea data (e.g. /mnt/nvme/gitea)
-UNRAID_SSH_KEY=                   # Path to SSH private key (optional, uses ssh-agent default if empty)
+UNRAID_SSH_KEY=                   # Absolute path to SSH private key, e.g. /Users/you/.ssh/id_ed25519 (optional, uses ssh-agent if empty)
 
 
 # -----------------------------------------------------------------------------
@@ -26,7 +26,7 @@ FEDORA_SSH_PORT=22                # SSH port (default 22)
 FEDORA_GITEA_PORT=3000            # Port Gitea web UI will listen on
 FEDORA_GITEA_SSH_PORT=2222        # Port for git-over-SSH (host 22 is taken by SSH server)
 FEDORA_GITEA_DATA_PATH=           # Absolute path on NVMe for Gitea data (e.g. /mnt/nvme/gitea)
-FEDORA_SSH_KEY=                   # Path to SSH private key (optional, uses ssh-agent default if empty)
+FEDORA_SSH_KEY=                   # Absolute path to SSH private key, e.g. /Users/you/.ssh/id_ed25519 (optional, uses ssh-agent if empty)
 
 
 # -----------------------------------------------------------------------------
@@ -38,8 +38,8 @@ GITEA_ADMIN_EMAIL=                # Admin email (same on both instances)
 GITEA_ORG_NAME=                   # Organization name to create (e.g. mifi-llc)
 GITEA_INSTANCE_NAME=              # Display name for the Gitea instance (e.g. MIFI Git)
 GITEA_DB_TYPE=sqlite3             # Database type — sqlite3 is sufficient for your scale
-GITEA_VERSION=1.23                # Gitea Docker image tag (e.g. 1.23, 1.23.1, latest)
-ACT_RUNNER_VERSION=0.2.11         # act_runner version for all runners (e.g. 0.2.11, latest)
+GITEA_VERSION=1.25                # Gitea Docker image tag (e.g. 1.25, 1.25.4, latest)
+ACT_RUNNER_VERSION=0.3.0          # act_runner version for all runners (e.g. 0.3.0, latest)
 
 
 # -----------------------------------------------------------------------------
@@ -56,7 +56,7 @@ GITEA_ADMIN_TOKEN=                # API token for primary instance — do not fi
 # -----------------------------------------------------------------------------
 GITEA_BACKUP_INTERNAL_URL=        # Internal URL of Fedora Gitea (e.g. http://FEDORA_IP:3000)
 GITEA_BACKUP_MIRROR_INTERVAL=8h   # How often Fedora pulls from Unraid (e.g. 8h, 24h)
-BACKUP_STORAGE_PATH=              # Absolute path on Fedora to store gitea dump archives (e.g. /mnt/nvme/gitea-backups)
+BACKUP_STORAGE_PATH=              # Absolute path on Fedora for backup archives (e.g. /mnt/nvme/gitea-backups)
 BACKUP_RETENTION_COUNT=5          # Number of backup archives to keep (older ones are pruned)
 # AUTO-POPULATED by phase2 scripts:
 GITEA_BACKUP_ADMIN_TOKEN=         # API token for backup instance — do not fill manually
@@ -81,7 +81,7 @@ GITEA_RUNNER_REGISTRATION_TOKEN=  # Retrieved from Gitea admin panel via API
 # -----------------------------------------------------------------------------
 # GitHub source repos (for migration import)
 GITHUB_USERNAME=                  # GitHub username or org name
-GITHUB_TOKEN=                     # GitHub personal access token (needs repo read scope)
+GITHUB_TOKEN=                     # GitHub PAT with repo scope (read+write, used for migration + push mirrors)
 
 # Repo names — must match exactly as they appear on GitHub
 REPO_1_NAME=                      # e.g. android-kotlin-app
@@ -95,14 +95,7 @@ MIGRATE_MILESTONES=false          # Migrate GitHub milestones
 MIGRATE_WIKI=false                # Migrate GitHub wiki
 MIGRATION_POLL_INTERVAL_SEC=3     # Poll interval while waiting for async migration completion
 MIGRATION_POLL_TIMEOUT_SEC=600    # Max wait per repo migration before timeout (increase for large repos)
-
-
-# -----------------------------------------------------------------------------
-# GITHUB MIRROR (offsite backup)
-# -----------------------------------------------------------------------------
-GITHUB_MIRROR_TOKEN=              # GitHub PAT with repo write scope (for push mirroring)
-                                  # Can be same as GITHUB_TOKEN if it has write scope
-GITHUB_MIRROR_INTERVAL=8h         # How often Gitea pushes to GitHub
+GITHUB_MIRROR_INTERVAL=8h         # How often Gitea pushes to GitHub (offsite backup)
 
 
 # -----------------------------------------------------------------------------