diff --git a/README.md b/README.md
index b2d5e53..6432cac 100644
--- a/README.md
+++ b/README.md
@@ -36,6 +36,8 @@ Infrastructure-as-Code for a 3-machine homelab running K3s.
 | JDownloader | `https://jdownloader.home.arpa` | Download manager |
 | Dashy | `https://dashy.home.arpa` | Dashboard |
 | Glances | `https://glances.home.arpa` | System monitoring |
+| Photoview | `https://photoview.home.arpa` | Photo gallery |
+| Portfolio | `https://nik4nao.com` | Public portfolio site |
 
 ## Repo Structure
 
@@ -65,11 +67,12 @@ config/
 manifests/
   authentik/                    # Authentik ingress, middleware, proxy outpost, secrets
   cert-manager/                 # ClusterIssuers and porkbun-secret.sh
-  core/                         # Dashy, Glances, CA installer, apply-dashy-config.sh
-  gitea/                        # Gitea PV, runner, backup, runner secret
-  media/                        # Jellyfin, qBittorrent, JDownloader
+  core/                         # Dashy, Glances, CA installer, CoreDNS config, apply-dashy-config.sh
+  gitea/                        # Gitea PV, runner, backup, public ingress, runner secret
+  media/                        # Jellyfin, qBittorrent, JDownloader, Photoview
   monitoring/                   # Grafana/Loki datasource, PVs, grafana-secret.sh
   network/                      # DDNS, Traefik dashboard, ingress routes, pihole patch
+  portfolio/                    # Portfolio deployment, registry pull secret
 values/
   authentik.yaml                # Authentik SSO
   cert-manager.yaml             # cert-manager
diff --git a/manifests/gitea/gitea-public-ingress.yaml b/manifests/gitea/gitea-public-ingress.yaml
index 4ff7040..b1cfdb5 100644
--- a/manifests/gitea/gitea-public-ingress.yaml
+++ b/manifests/gitea/gitea-public-ingress.yaml
@@ -1,3 +1,6 @@
+# Apply: kubectl apply -f manifests/gitea/gitea-public-ingress.yaml
+# Delete: kubectl delete -f manifests/gitea/gitea-public-ingress.yaml
+# Description: Let's Encrypt TLS certificate and public IngressRoute for Gitea at gitea.nik4nao.com.
 apiVersion: cert-manager.io/v1
 kind: Certificate
 metadata:
diff --git a/manifests/portfolio/portfolio.yaml b/manifests/portfolio/portfolio.yaml
index edb78bf..7be9dc4 100644
--- a/manifests/portfolio/portfolio.yaml
+++ b/manifests/portfolio/portfolio.yaml
@@ -1,3 +1,6 @@
+# Apply: kubectl apply -f manifests/portfolio/portfolio.yaml
+# Delete: kubectl delete -f manifests/portfolio/portfolio.yaml
+# Description: Portfolio website deployment, service, TLS certificate, and public IngressRoute at nik4nao.com.
 ---
 apiVersion: v1
 kind: Namespace
diff --git a/manifests/portfolio/registry-secret.sh b/manifests/portfolio/registry-secret.sh
index f8f9ba6..993cc67 100644
--- a/manifests/portfolio/registry-secret.sh
+++ b/manifests/portfolio/registry-secret.sh
@@ -1,4 +1,6 @@
-#!/bin/bash
+#!/usr/bin/env bash
+# Usage: bash manifests/portfolio/registry-secret.sh
+# Description: Creates the Gitea container registry pull secret for the portfolio namespace
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"