chore: update README to correct the sub numbers

Signed-off-by: Devin Buhl <devin@buhl.casa>
This commit is contained in:
Devin Buhl committed 2024-01-11 19:56:37 -05:00
1 parent 570b83c589
commit 4baa19a25b
1 file changed
+15 -15
+15 -15
View File
@@ -188,62 +188,62 @@ Once you have installed Debian on your nodes, there are six stages to getting a
📍 _Using [SOPS](https://github.com/getsops/sops) with [Age](https://github.com/FiloSottile/age) allows us to encrypt secrets and use them in Ansible and Flux._ 📍 _Using [SOPS](https://github.com/getsops/sops) with [Age](https://github.com/FiloSottile/age) allows us to encrypt secrets and use them in Ansible and Flux._
2a. Create a Age private / public key (this file is gitignored) 3a. Create a Age private / public key (this file is gitignored)
```sh ```sh
age-keygen -o age.key age-keygen -o age.key
``` ```
2b. Fill out the appropriate vars in `bootstrap/vars/config.yaml` 3b. Fill out the appropriate vars in `bootstrap/vars/config.yaml`
4. Create Cloudflare API Token 4. Create Cloudflare API Token
📍 _To use `cert-manager` with the Cloudflare DNS challenge you will need to create a API Token._ 📍 _To use `cert-manager` with the Cloudflare DNS challenge you will need to create a API Token._
3a. Head over to Cloudflare and create a API Token by going [here](https://dash.cloudflare.com/profile/api-tokens). 4a. Head over to Cloudflare and create a API Token by going [here](https://dash.cloudflare.com/profile/api-tokens).
3b. Under the `API Tokens` section click the blue `Create Token` button. 4b. Under the `API Tokens` section click the blue `Create Token` button.
3c. Click the blue `Use template` button for the `Edit zone DNS` template. 4c. Click the blue `Use template` button for the `Edit zone DNS` template.
3d. Name your token something like `home-kubernetes` 4d. Name your token something like `home-kubernetes`
3e. Under `Permissions`, click `+ Add More` and add each permission below: 4e. Under `Permissions`, click `+ Add More` and add each permission below:
```text ```text
Zone - DNS - Edit Zone - DNS - Edit
Account - Cloudflare Tunnel - Read Account - Cloudflare Tunnel - Read
``` ```
3f. Limit the permissions to a specific account and zone resources. 4f. Limit the permissions to a specific account and zone resources.
3g. Fill out the appropriate vars in `bootstrap/vars/config.yaml` 4g. Fill out the appropriate vars in `bootstrap/vars/config.yaml`
5. Create Cloudflare Tunnel 5. Create Cloudflare Tunnel
📍 _To expose services to the internet you will need to create a [Cloudflare Tunnel](https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/)._ 📍 _To expose services to the internet you will need to create a [Cloudflare Tunnel](https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/)._
4a. Authenticate cloudflared to your domain 5a. Authenticate cloudflared to your domain
```sh ```sh
cloudflared tunnel login cloudflared tunnel login
``` ```
4b. Create the tunnel 5b. Create the tunnel
```sh ```sh
cloudflared tunnel create k8s cloudflared tunnel create k8s
``` ```
4c. In the `~/.cloudflared` directory there will be a json file with details you need. Ignore the `cert.pem` file. 5c. In the `~/.cloudflared` directory there will be a json file with details you need. Ignore the `cert.pem` file.
4d. Fill out the appropriate vars in `bootstrap/vars/config.yaml` 5d. Fill out the appropriate vars in `bootstrap/vars/config.yaml`
6. Complete filling out the rest of the `bootstrap/vars/config.yaml` configuration file. 6. Complete filling out the rest of the `bootstrap/vars/config.yaml` configuration file.
5a. Ensure `bootstrap_acme_production_enabled` is set to `false`. 6a. Ensure `bootstrap_acme_production_enabled` is set to `false`.
5b. [Optional] Update `bootstrap/vars/addons.yaml` and enable applications you would like included. 6b. [Optional] Update `bootstrap/vars/addons.yaml` and enable applications you would like included.
7. Once done run the following command which will verify and generate all the files needed to continue. 7. Once done run the following command which will verify and generate all the files needed to continue.