Connect a signer
Blossom Labeler asks your signer extension for your public key. It never sees your nsec; your signer approves every upload and delete.
Add a Blossom server
Blobs go to a server you choose. Start with one and add more later. https://blossom.primal.net is a reasonable first choice.