# Server Steps

- [ ] Set up declarative disk partitioning (ephemeral)
- [x] Implement SOPS for secret management
- [x] Lock down machine IP addresses, passed in through flake as param.
- [ ] Create a k8s cluster on server
- [ ] Set up port forwarding to server from router
- [ ] Set up NGINX reverse proxy (or ingress controller for k8s?)
- [ ] Buy Domain Name
- [ ] Use "LetsEncrypt" for Server Cert (Enable HTTPS)