Clean up getting-started

This commit is contained in:
Astra Logical 2026-07-25 18:59:20 -04:00
parent 2c377dc11b
commit 72faf3eced

View file

@ -4,10 +4,12 @@ Welcome! This guide will walk you through your first steps on **The Nest**!
## Requesting Access to the Nest ## Requesting Access to the Nest
Are you a new user looking to join The Nest? You're in the right place! Take a trip to https://fledgling.mynest.love to request initial access. In order to join The Nest you'll need: Are you a new user looking to join The Nest? You're in the right place! Take a trip to [https://fledgling.mynest.love](https://fledgling.mynest.love) to request initial access.
In order to join The Nest you'll need:
- A username you're happy with. You can't change this later without a lot of hassle! - A username you're happy with. You can't change this later without a lot of hassle!
- A working email. I don't care if this is an alias, but it will need to work for initial account setup, account recovery, and service notifications (if you enroll in them) - A working email. I don't care if this is an alias, but it will need to work for initial account setup, account recovery, and service notifications (if you enroll in them).
Once you've requested access, an admin will review your request and approve or deny you. Once you've requested access, an admin will review your request and approve or deny you.
@ -16,7 +18,7 @@ Once you've requested access, an admin will review your request and approve or d
The Nest uses **passwordless authentication** powered by [Keycloak](https://keycloak.org/) and WebAuthn passkeys. This means: The Nest uses **passwordless authentication** powered by [Keycloak](https://keycloak.org/) and WebAuthn passkeys. This means:
1. You will never log in with a password (after initial setup). 1. You will never log in with a password (after initial setup).
2. You need a **passkey-capable password manager or device** — [Vaultwarden](communication-and-security/vaultwarden.md) (you will be given access to Vaultwarden by default), a smartphone, tablet, or computer with a fingerprint reader, face scanner, or security key (e.g., YubiKey). 2. You need a **passkey-capable password manager or device** — [Vaultwarden](communication-and-security/vaultwarden.md) (you will be given access to Vaultwarden upon account approval), a smartphone, tablet, or computer with a fingerprint reader, face scanner, or security key (e.g., YubiKey).
3. You will use the same passkey for all services in The Nest. 3. You will use the same passkey for all services in The Nest.
### First-Time Setup ### First-Time Setup
@ -25,43 +27,41 @@ Once approved, you will receive two emails:
1. An invite to join Vaultwarden. 1. An invite to join Vaultwarden.
2. An email with instructions on first-time setup that pointed you here. Hi! 2. An email with instructions on first-time setup that pointed you here. Hi!
If you would like to make use of Vaultwarden, accept the Vaultwarden invite, otherwise feel free to ignore it.
Once you have a passkey-capable password manager or device:
1. Visit [sso.mynest.love](https://sso.mynest.love) and click **Sign In**. 1. Visit [sso.mynest.love](https://sso.mynest.love) and click **Sign In**.
2. Enter the email address you were provided. 2. Enter the account name and temporary password you were provided.
3. Follow the prompts to create your first passkey on your device. - **Note:** this will be the only time you are allowed to sign in using a traditional password.
4. Choose a username (this is your Matrix display name and Forgejo handle). 3. Follow the instructions to set up a passkey for your account
> [!TIP]
> If you lose access to all your enrolled passkeys, contact an admin via Matrix (`@nest:starling.mynest.love`) for account recovery. You will need to verify your identity using your registered email.
## Setting Up Vaultwarden (Recommended First Step)
Before exploring other services, set up [Vaultwarden](vaultwarden.md). It stores your passkeys securely and syncs across devices — making future logins seamless.
1. Open <https://vault.mynest.love>
2. Click **Master Password****I forgot my master password** (first-time flow)
3. Follow the setup wizard to create your vault and enroll a passkey for The Nest SSO.
## Your Default Account ## Your Default Account
When you join The Nest, you are granted access to the following services by default: When you join The Nest, you are granted access to the following services by default:
- **Matrix** — Chat and voice/video calls - [**Matrix**](communication-and-security/matrix.md) — Chat and voice/video calls
- **Vaultwarden** — Password manager (Bitwarden-compatible) - [**Vaultwarden**](communication-and-security/vaultwarden.md) — Password manager (Bitwarden-compatible)
- **Forgejo** — Git hosting for code collaboration - [**Forgejo**](productivity-and-creation/forgejo.md) — Git hosting for code collaboration
- **This Documentation Site** — You're reading it right now - [**This Documentation Site**](https://mynest.love) — You're reading it right now
- **Foundry VTT** - A virtual tabletop for RPGs - [**Foundry VTT**](productivity-and-creation/foundry-vtt.md) - A virtual tabletop for RPGs
All other services require an admin to grant you access. See [Requesting Service Access](access-requests.md) for details. All other services require an admin to grant you access. See [Requesting Service Access](access-requests.md) for details.
## Exploring Services ## Exploring Services
Once your account is set up, browse the user-facing guides above to learn about each service. Most will use **"Sign in with The Nest"** as their authentication method — no separate credentials needed. Once your account is set up, browse the user-facing guides to learn about each service. Most will use **"Sign in with The Nest"** as their authentication method — no separate credentials needed.
*You may also see verbiage like "Sign in with OIDC", "Sign in with Keycloak", or "Sign in with SSO". These are all the same.*
## What If Something Goes Wrong? ## What If Something Goes Wrong?
- **Can't sign in?** Try a different passkey-capable device or contact an admin via Matrix. - **Can't sign in?** Try a different passkey-capable device or contact an admin via Matrix.
- **Service won't load?** Some services auto-update daily around 03:00 EST. Wait a few minutes and try again. - **Service won't load?** Some services auto-update daily around 03:00 EST. Wait a few minutes and try again.
- **Need help with a specific service?** Ask in the Matrix admin room or open a request via `@access-bot`. - **Need help with a specific service?** Ask in the Matrix admin room.
>[!TIP]
>There is an "Admin" space in matrix with an "Ask an Admin" room.
--- ---