infra/devdoc/onboarding.md

Onboarding a new nix-community admin

• Add them to the list of administrators

• Add their user and ssh key to users as member of the trusted and wheel groups.

• Add their ssh key to the hetzner user in modules/darwin/common/default.nix.

• Add their user to the list of admins in modules/nixos/buildbot.nix.

• Add their age key to .sops.yaml, update the creation_rules and run inv update-sops-files.

• Make them a owner of the nix-community GitHub organisation and a member of the nix-community GitHub admin team.

  • owner will give them admin access to Hercules CI.

• Add their email in terraform/locals.tf, this will give them access to:

  • email forwarded from the admin@nix-community.org address
  • Cloudflare
  • Terraform Cloud

• Make them an admin in these Matrix rooms:

  • https://matrix.to/#/#nix-community:nixos.org
  • https://matrix.to/#/#nix-community-monitoring:matrix.org

• They will also need to be added manually to these services:

  • Cachix
  • Gandi (Organisations -> Nix Community -> Teams -> Owner)
  • GitLab
  • OpenCollective