# Internal Infra Setup
Once you get your auth credentials and have setup nebula, follow this guide to start using the internal infra
## Setup authelia
- First login with the credentials sent to you and setup 2fa

## Setup 2FA
### With Yubikey (people with vm access, and a yubikey)
- After logging into auth.lgns.me then click on methods and select "Security Key - WebAuthN", and click on "register device", then an email will be sent to your email
- Open the email in the same browser (the session where you are logged in)
- Follow the instructions given by authelia
### With Phone (everyone)
- After logging into auth.lgns.me then click on methods and select "Time-based One-Time Password",and click on “register device”, email will be sent to your email.
- Download a secure authenticator app (ex- Auth0) on your mobile
- Open your email and open the link sent on the same browser (the session where you are logged in)
- Scan the qr and add the account in your authenticator app

### Reset Password
- Logout and click "forgot password"
- Email will be sent to you on how to reset it

## Available services
Now that you have set up 2fa and reset your password, you will be able to access the following self hosted services
- Outline (notion alternative) (docs.lgns.me)
- Vikunja (project manager) (todo.lgns.me)
- Gitlab (git.lgns.me)

The above services use authelia (auth.lgns.me) for authentication and can only be accessed if you have nebctl set up.

## Additional setup for vikunja ([vikunja](https://todo.lgns.me))
- Once logged into vikunja go to user settings (top right user -> settings)
- Allow these permissions ( "Let other users find me when they search for my name" and "Let other users find me when they search for my full email")

- Then save and exit