diff --git a/docs/roles/forgejo.md b/docs/roles/forgejo.md
new file mode 100644
index 0000000..70f3a57
--- /dev/null
+++ b/docs/roles/forgejo.md
@@ -0,0 +1,13 @@
+# Forgejo role
+
+By default the forgejo server is installed without any users and without an
+external authentication provider. To create the first (admin) user ssh into the
+host and run 
+```bash
+forgejo-cli admin user create --username $username --email $email --admin
+```
+
+After this, you can log in with this new user and set up SSO through the
+[admin panel](https://$DOMAIN/admin/auths). After this is set up (and verified)
+you can change the initial user to use the new authentication source in the
+[admin panel](https://$DOMAIN/admin/users).