feat(v2): complete v2 reimplementation

2026-07-31 13:33:39 +02:00
parent 396219e776
commit bd107d6a30
137 changed files with 20737 additions and 155 deletions
@@ -0,0 +1,11 @@
+# Disaster recovery runbook
+
+1. Isolate the failed host and preserve the metadata volume, repository roots, logs,
+   image digest, and master-key backup. Do not restart writers repeatedly.
+2. Provision a clean host with the same pinned image and non-root volume permissions.
+3. Restore the master key securely, restore repository roots read-only first, and
+   restore metadata from a verified backup or the passphrase-protected recovery bundle.
+4. Run `migrate current`, start only `web`, validate `/readyz` and repository
+   inspection, then start scheduler and worker one at a time.
+5. Perform and document a test restore before enabling scheduled work. Rotate secrets
+   if host compromise is possible.