GUIDE: install, backup, upgrade

Author: eins78

GUIDE.md

@@ -1,3 +1,5 @@
+# Madek Hosting Guide
+
 ## quickstart
 
 1. ["Fork" this repository on github](https://github.com/Madek/madek-instance/fork)
@@ -21,6 +23,30 @@
   - global config in file `group_vars/madek.yml`
   - per-host config in file `host_vars/madek.example.com.yml`, rename it to match the hostname
 
-1. install `ansible-playbook -i hosts Madek/deploy/play_setup-and-deploy.yml`
+1. install with ansible
+  ```sh
+  ansible-playbook -i hosts Madek/deploy/play_setup-and-deploy.yml
+  ```
+
+1. setup initial configuration & admin account:
+  ```sh
+  ansible-playbook -i hosts Madek/deploy/play_first-time-setup.yml
+  ```
+
+## backup
+
+A `master_secret` was created during the installation and put in a text file
+in your repository.
+By default it is git-ignored, so it won't be accidentially pushed to a public
+host (like GitHub).
+You should either back up your local repository to a secure place;
+or use [`git-crypt`](https://www.agwa.name/projects/git-crypt/) to add the
+secret to the repository in encrypted form (*recommended*).
+
+## upgrade
+
+1. update Madek submodule reference to latest release
+  - either by accepting a Pull Request (when enabled)
+  - or manually: `cd Madek && git fetch && git reset --hard origin/release && cd -`
 
-1. (setup admin account)
+1. run the setup playbook again: `ansible-playbook -i hosts Madek/deploy/play_setup-and-deploy.yml`