Add forgejo notes

doc/forgejo.md

@@ -0,0 +1,9 @@
+
+
+
+# Further Reading #
+
+* Admin guide: https://forgejo.org/docs/latest/admin/
+
+* Arch notes: https://wiki.archlinux.org/title/Forgejo
+

infra/scripts/setup_machine.sh

@@ -1,9 +1,5 @@
 export MY_USER="my_user"
 
-# Create non-root user
-adduser $MY_USER
-usermod -aG sudo $MY_USER
-
 # Set up firewall
 ufw allow OpenSSH
 ufw enable
@@ -14,10 +10,17 @@ ufw enable
 # PasswordAuthentication no
 # ChallengeResponseAuthentication no
 # UsePAM no
-# sudo systemctl restart ssh
+
+# Create non-root user
+adduser $MY_USER
+usermod -aG sudo $MY_USER
 
 # Enable ssh login
-rsync --archive --chown=$MY_USER:$MY_USER ~/.ssh /home/$MY_USER
+rsync --archive --chown=$MY_USER:$MY_USER ~/.ssh /home/$MY_USER/.ssh
 
 # Fail2ban for SSH
-apt install fail2ban
+apt install fail2ban
+
+# Restart ssh
+sudo systemctl restart ssh
+