homelab-config/server-steps.md

Server Steps

1. Set up declarative disk partitioning (ephemeral)
2. Implement SOPS for secret management
3. Lock down machine IP addresses, passed in through flake as param
4. Create a k8s cluster on server
5. Set up port forwarding to server from router
6. Set up NGINX reverse proxy (or ingress controller for k8s?)
7. Buy Domain Name
8. Use "LetsEncrypt" for Server Cert (Enable HTTPS)