infra/devdoc/onboarding.md

Onboarding a new nix-community admin

• Add them to the list of administrators

• Add their user and ssh key to users as member of the trusted and wheel groups.

• Add their user to secrets/secrets.nix and run inv update-agenix-files.

• Add their age key to .sops.yaml, update the creation_rules and run inv update-sops-files.

• Add their email in terraform/locals.tf, this will give them access to:

  • Cloudflare
  • Terraform Cloud

• Add their user to the list of admins in modules/nixos/buildbot.nix.

• Make them a owner of the nix-community GitHub organisation and a member of the nix-community GitHub admin team.

  • owner will give them admin access to Hercules CI.

• Make them an admin in these Matrix rooms:

  • https://matrix.to/#/#nix-community:nixos.org
  • https://matrix.to/#/#nix-community-monitoring:matrix.org

• Make them an owner on Gandi and add them to the email forwarding for the admin@nix-community.org address.

  • Organisations -> Nix Community -> Teams -> Owner
  • Domain -> nix-community.org -> Email -> Forwarding address -> Forwards to

• They will also need to be added manually to these services:

  • Cachix
  • GitLab
  • Hetzner Robot
  • OpenCollective