diff --git a/argocd/manifests/homepage/external-secret-forgejo.yaml b/argocd/manifests/homepage/external-secret-forgejo.yaml
new file mode 100644
index 0000000..8c771ab
--- /dev/null
+++ b/argocd/manifests/homepage/external-secret-forgejo.yaml
@@ -0,0 +1,20 @@
+# ExternalSecret for Forgejo API key
+# Used by Homepage Forgejo widget (via Gitea widget type)
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: homepage-forgejo
+  namespace: homepage
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword-blumeops
+  target:
+    name: homepage-forgejo
+    creationPolicy: Owner
+  data:
+    - secretKey: apikey
+      remoteRef:
+        key: Forgejo Secrets
+        property: eblume-homepage-access-token
diff --git a/argocd/manifests/homepage/values.yaml b/argocd/manifests/homepage/values.yaml
index e80bf86..489236a 100644
--- a/argocd/manifests/homepage/values.yaml
+++ b/argocd/manifests/homepage/values.yaml
@@ -56,6 +56,12 @@ env:
       secretKeyRef:
         name: homepage-grafana
         key: password
+  # Forgejo widget
+  - name: HOMEPAGE_VAR_FORGEJO_API_KEY
+    valueFrom:
+      secretKeyRef:
+        name: homepage-forgejo
+        key: apikey
 
 config:
   # Host services (non-k8s, on indri or LAN)
@@ -65,11 +71,10 @@ config:
             href: https://forge.ops.eblu.me
             icon: forgejo
             description: Git forge
-            # TODO: Add Forgejo widget when API token is created
-            # widget:
-            #   type: gitea
-            #   url: https://forge.ops.eblu.me
-            #   key: "{{HOMEPAGE_VAR_FORGEJO_API_KEY}}"
+            widget:
+              type: gitea
+              url: https://forge.ops.eblu.me
+              key: "{{HOMEPAGE_VAR_FORGEJO_API_KEY}}"
         - Registry:
             href: https://registry.ops.eblu.me
             icon: docker