From d9016105ed7efd7a2c356c5d48a06b780f6d0d98 Mon Sep 17 00:00:00 2001
From: Jose Henrique <jose.henrique.ivan@gmail.com>
Date: Sun, 30 Aug 2026 19:32:37 -0300
Subject: [PATCH] improving setup

---
 SETUP.md | 40 +++++++++++++++++++++++++++++++++-------
 1 file changed, 33 insertions(+), 7 deletions(-)

diff --git a/SETUP.md b/SETUP.md
index 7821714..7d7929e 100644
--- a/SETUP.md
+++ b/SETUP.md
@@ -1,12 +1,22 @@
-# Initial setup
-```sh
-# Create namespace
+# Setup Instructions
+
+## Pre-installation
+
+1. Create namespaces with
+```bash
 kubectl apply -f bootstrap/namespaces.yaml
+```
 
-# Install ArgoCD
+2. Apply Vaultwarden deployment app
+```bash
+kubectl apply -f apps/default/vaultwarden.yaml
+```
+
+3. Configure required secrets in `secrets/` directory, each mapping to an entity in Vaultwarden.
+
+## ArgoCD Installation
+```sh
 kubectl apply -k bootstrap/argocd-install
-
-# Apply root app
 kubectl apply -f bootstrap/root-app.yaml
 ```
 
@@ -16,4 +26,20 @@ kubectl apply -f bootstrap/root-app.yaml
 kubectl -n argocd get secret argocd-initial-admin-secret -o jsonpath="{.data.password}" | base64 -d; echo
 ```
 
-2. Access ArgoCD and login with `admin` / password from above.
\ No newline at end of file
+2. Access ArgoCD and login with `admin` / password from above.
+
+## External Secrets Operator preparation
+
+Create this Secret manually. `BW_HOST` must have no trailing slash.
+
+```bash
+kubectl -n infra create secret generic bitwarden-cli \
+  --from-literal=BW_HOST='[VAULTWARDEN_URL]' \
+  --from-literal=BW_USERNAME='[VAULTWARDEN_EMAIL]' \
+  --from-literal=BW_PASSWORD='[VAULTWARDEN_PASSWORD]'
+```
+
+## Apply order
+1. `kubectl apply -f secrets/`
+2. `kubectl apply -f apps/metalldb-system/`
+3. `kubectl apply -f apps/infra/`
\ No newline at end of file