Push nrxnukzvxrpt (#9)

* work on install documentation'

* get forgejo setup

* flake.lock: Update

Flake lock file updates:

• Updated input 'nix-secrets':
    'git+ssh://git@github.com/TheWanderingCrow/nix-secrets?ref=refs/heads/master&rev=ee028b24d966663da48f4d1884ba84c3db779518' (2025-10-16)
  → 'git+ssh://git@github.com/TheWanderingCrow/nix-secrets?ref=refs/heads/master&rev=e83722f7ae8d1289579ed1d064176e57b294eb41' (2025-10-22)
This commit is contained in:
Crow 2025-10-22 14:13:27 -04:00 committed by GitHub
parent 8560beb505
commit 6f0cd412f1
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 16 additions and 4 deletions

8
flake.lock generated
View file

@ -333,11 +333,11 @@
"nixpkgs": "nixpkgs_3"
},
"locked": {
"lastModified": 1760644113,
"narHash": "sha256-vQ/aSkyfHAaEqi38S86U1LVFwTqY8U3YQ1GPNwcPyAI=",
"lastModified": 1761156521,
"narHash": "sha256-+lGuJKTRHqpBDEE8xgkImYpCNR67BRtHbH5zNCE2uhg=",
"ref": "refs/heads/master",
"rev": "ee028b24d966663da48f4d1884ba84c3db779518",
"revCount": 140,
"rev": "e83722f7ae8d1289579ed1d064176e57b294eb41",
"revCount": 141,
"type": "git",
"url": "ssh://git@github.com/TheWanderingCrow/nix-secrets"
},

View file

@ -2,5 +2,9 @@
services.forgejo = {
enable = true;
lfs.enable = true;
database = {
type = "sqlite3";
createDatabase = true;
};
};
}

View file

@ -13,3 +13,11 @@ From this subdirectory directory, run `just iso` to generate the ISO file
ethernet and SSH in using the installer key in order to setup SOPS, this
section will be amended when we figure this out
6. Connect new host to ethernet and SSH in
7. Run `ssh-keyscan <host> | ssh-to-age` to get the age keys for the remote
8. Place the public key into .sops.yaml in the secrets repo at keys.hosts.<host>
9. Run `age-keygen` and place the public key in keys.users.<user>_<host>
10. Create the <host>.yaml file in .sops.yaml and assign *skeleton, the host
key, and the user key
11. Run `just rekey` in the secrets repo and push, then run `just update-secret`
in the primary repo and push.
12. Rebuild the system and test for working sops, you can now login locally