From d397b5201235962311403b5119eb7f3d6f4eb2c0 Mon Sep 17 00:00:00 2001 From: Roy Dumblauskas Date: Mon, 5 May 2025 13:08:06 -0500 Subject: [PATCH] additional server steps --- server-steps.md | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/server-steps.md b/server-steps.md index e62d94a..b8197d1 100644 --- a/server-steps.md +++ b/server-steps.md @@ -4,6 +4,11 @@ - [x] Implement SOPS for secret management - [x] Lock down machine IP addresses, passed in through flake as param. - [x] Set up port forwarding to server from router -- [ ] Set up NGINX reverse proxy (or ingress controller for k8s?) +- [x] Set up NGINX reverse proxy (or ingress controller for k8s?) - [x] Buy Domain Name -- [x] Use "LetsEncrypt" for Server Cert (Enable HTTPS) +- [x] Use ACME for Server Cert (Enable HTTPS) +- [ ] Bootsrap private ssh key to sysAdmin user to allow local cloning of repo +- [ ] Add auto repo cloning to bootstrap +- [ ] Make build path location of automated repo cloning +- [ ] Define "services" directory to declare each service separately +- [ ] Add list of services to each hostname to define what they'll host (look into adding top layer reverse proxy if it's needed for multiple machines hosting separate services accross one domain name)