From 2829eb6214e76130dae21ccf1906872b58f2124d Mon Sep 17 00:00:00 2001
From: tux <tux@gluebox.com>
Date: Mon, 26 Jan 2026 09:48:49 -0500
Subject: [PATCH] Update 80_infrastructure/gitea-access.md

---
 80_infrastructure/gitea-access.md | 67 ++++++++++++++++++++++++++++++-
 1 file changed, 65 insertions(+), 2 deletions(-)

diff --git a/80_infrastructure/gitea-access.md b/80_infrastructure/gitea-access.md
index 3709089..5e4b5ed 100644
--- a/80_infrastructure/gitea-access.md
+++ b/80_infrastructure/gitea-access.md
@@ -1,3 +1,66 @@
-# Format: https://[username]:[token]@[gitea-url]/[repo].git
+# 📄 Revised `gitea-access.md` (Draft)
 
-git clone https://tux:your_access_token_here@gitea.gluebox.com/tux/rsvp-system-core.git
\ No newline at end of file
+---
+
+## 1. The SSH Connection Rule
+
+Because this instance runs as the `gitea` user (not `git`), all SSH clones **must** use the `gitea` prefix.
+
+- ❌ **WRONG:**
+
+  ```
+  git@code.gluebox.com:tux/repo.git
+  ```
+
+- ✅ **CORRECT:**
+
+  ```
+  gitea@code.gluebox.com:tux/repo.git
+  ```
+
+---
+
+## 2. Required Server Settings (`app.ini`)
+
+For authentication to work correctly across Git and API access, the following must be set:
+
+```ini
+OFFLINE_MODE     = false     # Ensures internal host resolution works
+DISABLE_SSH      = false     # Enables the SSH handshake
+LOCAL_ROOT_URL   = http://localhost:3000/   # Critical for internal token verification
+```
+
+---
+
+## 3. macOS Setup Flow
+
+### 🔑 Generate SSH Key
+
+```bash
+ssh-keygen -t ed25519
+```
+
+### 🔗 Add to Gitea
+
+Paste your `.pub` file content into:  
+**User Settings → SSH / GPG Keys**
+
+---
+
+### ✅ Verify Connection
+
+```bash
+ssh -T gitea@code.gluebox.com
+```
+
+Expected response:
+
+> "Hi there, [username]!"
+
+---
+
+### 📥 Clone Command
+
+```bash
+git clone gitea@code.gluebox.com:tux/rsvp-system-core.git
+```