From 668db542c7ee69800366c22bbe10a695c2fea5b3 Mon Sep 17 00:00:00 2001 From: Roy Dumblauskas Date: Mon, 5 May 2025 10:08:54 -0500 Subject: [PATCH] update server steps and readme.md --- readme.md | 2 +- server-steps.md | 9 ++++----- 2 files changed, 5 insertions(+), 6 deletions(-) diff --git a/readme.md b/readme.md index 0a83c9b..d255fa2 100644 --- a/readme.md +++ b/readme.md @@ -8,7 +8,7 @@ ### Setup Steps 1. Flash NixOS onto the server hardware 2. Create a sudo password for root -3. Run nixos anwhere command to install repo config: ```nix run github:nix-community/nixos-anywhere --extra-experimental-features "nix-command flakes" -- --generate-hardware-config nixos-generate-config ./hardware-configuration.nix --flake '.#' root@``` +3. Run the bash script ```homelab-config/nixos/script.sh``` ### Random - Any time the quasiSecret Reop is updated, run ```nix flake lock --update-input quasiSecrets``` to ensure you're using the most recent pushed commit diff --git a/server-steps.md b/server-steps.md index a755d82..e62d94a 100644 --- a/server-steps.md +++ b/server-steps.md @@ -1,10 +1,9 @@ # Server Steps -- [ ] Set up declarative disk partitioning (ephemeral) +- [x] Set up declarative disk partitioning (ephemeral) - [x] Implement SOPS for secret management - [x] Lock down machine IP addresses, passed in through flake as param. -- [ ] Create a k8s cluster on server -- [ ] Set up port forwarding to server from router +- [x] Set up port forwarding to server from router - [ ] Set up NGINX reverse proxy (or ingress controller for k8s?) -- [ ] Buy Domain Name -- [ ] Use "LetsEncrypt" for Server Cert (Enable HTTPS) +- [x] Buy Domain Name +- [x] Use "LetsEncrypt" for Server Cert (Enable HTTPS)