# Server Steps

- [x] Set up declarative disk partitioning (ephemeral)
- [x] Implement SOPS for secret management
- [x] Lock down machine IP addresses, passed in through flake as param.
- [x] Set up port forwarding to server from router
- [ ] Set up NGINX reverse proxy (or ingress controller for k8s?)
- [x] Buy Domain Name
- [x] Use "LetsEncrypt" for Server Cert (Enable HTTPS)