Update 80_infrastructure/gitea-access.md

80_infrastructure/gitea-access.md

@@ -1,3 +1,66 @@
-# Format: https://[username]:[token]@[gitea-url]/[repo].git
+# 📄 Revised `gitea-access.md` (Draft)
 
-git clone https://tux:your_access_token_here@gitea.gluebox.com/tux/rsvp-system-core.git
+---
+
+## 1. The SSH Connection Rule
+
+Because this instance runs as the `gitea` user (not `git`), all SSH clones **must** use the `gitea` prefix.
+
+- ❌ **WRONG:**
+
+  ```
+  git@code.gluebox.com:tux/repo.git
+  ```
+
+- ✅ **CORRECT:**
+
+  ```
+  gitea@code.gluebox.com:tux/repo.git
+  ```
+
+---
+
+## 2. Required Server Settings (`app.ini`)
+
+For authentication to work correctly across Git and API access, the following must be set:
+
+```ini
+OFFLINE_MODE     = false     # Ensures internal host resolution works
+DISABLE_SSH      = false     # Enables the SSH handshake
+LOCAL_ROOT_URL   = http://localhost:3000/   # Critical for internal token verification
+```
+
+---
+
+## 3. macOS Setup Flow
+
+### 🔑 Generate SSH Key
+
+```bash
+ssh-keygen -t ed25519
+```
+
+### 🔗 Add to Gitea
+
+Paste your `.pub` file content into:  
+**User Settings → SSH / GPG Keys**
+
+---
+
+### ✅ Verify Connection
+
+```bash
+ssh -T gitea@code.gluebox.com
+```
+
+Expected response:
+
+> "Hi there, [username]!"
+
+---
+
+### 📥 Clone Command
+
+```bash
+git clone gitea@code.gluebox.com:tux/rsvp-system-core.git
+```