From 351dc7bafefc2805c53b0b6bece983bcc02db93b Mon Sep 17 00:00:00 2001 From: root Date: Sat, 18 Jul 2026 07:01:26 -0400 Subject: [PATCH] Backup audit: fix UniFi/UNMS/wphost02, add Mattermost/Grafana/Uptime/Prometheus to S3, remove Ollama --- backup-plan.md | 17 +++++++++-------- 1 file changed, 9 insertions(+), 8 deletions(-) diff --git a/backup-plan.md b/backup-plan.md index 4ee58c3..c1f6053 100644 --- a/backup-plan.md +++ b/backup-plan.md @@ -13,12 +13,13 @@ |---|---|---|---| | Every 15 min | Core | hermes-live-sync | Hermes session state → S3 live/ | | 1:00 AM | Core | hermes-backup.sh | Full Hermes backup | -| 1:30 AM | Core | core-services-backup.sh | Vaultwarden, Twenty CRM, SearXNG, Komodo, Prometheus | +| 1:30 AM | Core | core-services-backup.sh | Vaultwarden, Twenty CRM, SearXNG, Komodo, Prometheus, Grafana, Uptime Kuma | | 2:00 AM | Core | backup-audit-check.sh | Verify all backups | -| 2:00 AM | app1 | /root/backup.sh | LiteLLM, Open WebUI, n8n, MCPs, Ollama | -| 2:30 AM | app2 | /root/backup.sh | Traccar, Gitea, Hudu, UNMS, UniFi | +| 2:00 AM | app1 | /root/.hermes/scripts/app1-backup.sh | LiteLLM, Open WebUI, n8n, MCP configs, Mattermost | +| 2:30 AM | app2 | /root/.hermes/scripts/app2-backup.sh | Traccar, Gitea, Hudu, UNMS, UniFi | | 3:00 AM | Core | root-essentials-backup.sh | /root essentials | -| 3:00 AM | app3 | /root/backup.sh | CloudPanel, MySQL, WordPress, Nginx configs | +| 3:00 AM | app3 | /root/.hermes/scripts/app3-backup.sh | CloudPanel, MySQL, WordPress, Nginx configs | +| 5:00 AM | Core | wphost02-backup (cron) | wphost02 webapps + databases → S3 | | 1:00 AM + 1:00 PM | app3 | /opt/backup-restore/snapshot.sh | Per-site WordPress snapshots (files + DB), 60-day retention | | 3:00 AM | Core | docker-volume-sync.sh | Docker volumes | | 4:00 AM | Core | system-config-sync.sh | System configs | @@ -38,9 +39,9 @@ | Twenty CRM | Postgres pg_dump → S3 (daily) | 24 hr | | SearXNG | settings.yml → S3 (daily) | 24 hr | | Komodo | config dir → S3 (daily) | 24 hr | -| Prometheus | TSDB snapshot (daily) | 24 hr | -| Grafana | Covered by docker-volume-sync | 24 hr | -| Uptime Kuma | Covered by docker-volume-sync | 24 hr | +| Prometheus | TSDB snapshot → S3 (daily) | 24 hr | +| Grafana | SQLite DB → S3 (daily) | 24 hr | +| Uptime Kuma | SQLite DB → S3 (daily) | 24 hr | | DocuSeal | Covered by docker-volume-sync | 24 hr | | Caddy config | system-config-sync (daily) | 24 hr | | /root essentials | root-essentials-backup (daily) | 24 hr | @@ -153,6 +154,6 @@ core-bu (5.161.225.131) automatically syncs from S3 every 10 minutes. To activat | Gap | Impact | Plan | |---|---|---| | No WAL archiving | RPO is 24 hours for most databases | Add WAL-G for Postgres services | -| Ollama models not backed up | 4-8 GB models would need re-download | Low priority — models are reproducible | | No restore testing | Don't know if backups actually restore | Schedule quarterly restore drill | | core-bu not tested since upgrade | Standby might not work | Schedule failover test | +| wphost02 S3 upload in progress | First backup running now | Monitor completion |