From 852791e15a4e63754479e3fadb459afea333748a Mon Sep 17 00:00:00 2001
From: DeadSwitch <deadswitch404@proton.me>
Date: Mon, 9 Feb 2026 13:36:38 +0100
Subject: [PATCH] Clarified the secret generation task.

---
 tasks/main.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/tasks/main.yml b/tasks/main.yml
index 377447c..eba22b0 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -28,17 +28,17 @@
     dest: /usr/local/bin/gitea
     checksum: "sha256:{{ gitea_checksum_url }}"
 
-- name: Pause to save the generated secrets in SOPS
+- name: Pause to generate and save the secrets in SOPS
   ansible.builtin.pause:
     prompt: |
       [SECURITY NOTICE]
       If this is a fresh install, generate these secrets:
       1. gitea generate secret INTERNAL_TOKEN
       2. gitea generate secret JWT_SECRET
-      3. gitea generate secret LFS_JWT_SECRET
+      3. gitea generate secret JWT_SECRET
       Copy the following keys into SOPS:
-        - gitea_lfs_jwt_secret
         - gitea_internal_token
+        - gitea_lfs_jwt_secret
         - gitea_jwt_secret
       Press ENTER once done to continue.
   when: gitea_internal_token is not defined