homelab-config/server-steps.md

Server Steps

• Set up declarative disk partitioning (ephemeral)
• Implement SOPS for secret management
• Lock down machine IP addresses, passed in through flake as param.
• Set up port forwarding to server from router
• Set up NGINX reverse proxy (or ingress controller for k8s?)
• Buy Domain Name
• Use "LetsEncrypt" for Server Cert (Enable HTTPS)