feat: initial infrastructure baseline

docs/tech/setup.md

@@ -0,0 +1,44 @@
+# Workstation Setup Guide
+
+This guide describes how to bootstrap the **mw-pfeddersheim-workstation** infrastructure on a fresh installation.
+
+## Prerequisites
+- Linux (Arch/CachyOS preferred)
+- Python 3.12+
+- Git
+
+## Bootstrap Steps
+
+1. **Clone the Infrastructure Repo**
+   ```bash
+   mkdir -p ~/infrastructure
+   cd ~/infrastructure
+   git clone <repo-url> mw-pfeddersheim-workstation
+   cd mw-pfeddersheim-workstation
+   ```
+
+2. **Install Ansible**
+   ```bash
+   sudo pacman -S ansible
+   ```
+
+3. **Configure Secrets**
+   ```bash
+   # Create a vault password file (do not commit!)
+   echo "your-strong-password" > ansible/vault_password
+   
+   # Create secrets file
+   ansible-vault create ansible/vars/secrets.yml
+   ```
+
+4. **Run the Playbook**
+   ```bash
+   ansible-playbook -i localhost, -c local --vault-password-file ansible/vault_password ansible/workstation.yml --check
+   # If check passes:
+   ansible-playbook -i localhost, -c local --vault-password-file ansible/vault_password ansible/workstation.yml
+   ```
+
+5. **Initialize Maintenance**
+   ```bash
+   ./scripts/maintenance.sh
+   ```