ippadmin/itpp-infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Backup audit: fix UniFi/UNMS/wphost02, add Mattermost/Grafana/Uptime/Prometheus to S3, remove Ollama

Browse Source
This commit is contained in:
root
2026-07-18 07:01:26 -04:00
parent 3424b9013b
commit 351dc7bafe
1 changed files with 9 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backup-plan.md
+9 -8
View File
@@ -13,12 +13,13 @@
|---|---|---|---|
| Every 15 min | Core | hermes-live-sync | Hermes session state → S3 live/ |
| 1:00 AM | Core | hermes-backup.sh | Full Hermes backup |
| 1:30 AM | Core | core-services-backup.sh | Vaultwarden, Twenty CRM, SearXNG, Komodo, Prometheus |
| 1:30 AM | Core | core-services-backup.sh | Vaultwarden, Twenty CRM, SearXNG, Komodo, Prometheus, Grafana, Uptime Kuma |
| 2:00 AM | Core | backup-audit-check.sh | Verify all backups |
| 2:00 AM | app1 | /root/backup.sh | LiteLLM, Open WebUI, n8n, MCPs, Ollama |
| 2:30 AM | app2 | /root/backup.sh | Traccar, Gitea, Hudu, UNMS, UniFi |
| 2:00 AM | app1 | /root/.hermes/scripts/app1-backup.sh | LiteLLM, Open WebUI, n8n, MCP configs, Mattermost |
| 2:30 AM | app2 | /root/.hermes/scripts/app2-backup.sh | Traccar, Gitea, Hudu, UNMS, UniFi |
| 3:00 AM | Core | root-essentials-backup.sh | /root essentials |
| 3:00 AM | app3 | /root/backup.sh | CloudPanel, MySQL, WordPress, Nginx configs |
| 3:00 AM | app3 | /root/.hermes/scripts/app3-backup.sh | CloudPanel, MySQL, WordPress, Nginx configs |
| 5:00 AM | Core | wphost02-backup (cron) | wphost02 webapps + databases → S3 |
| 1:00 AM + 1:00 PM | app3 | /opt/backup-restore/snapshot.sh | Per-site WordPress snapshots (files + DB), 60-day retention |
| 3:00 AM | Core | docker-volume-sync.sh | Docker volumes |
| 4:00 AM | Core | system-config-sync.sh | System configs |
@@ -38,9 +39,9 @@
| Twenty CRM | Postgres pg_dump → S3 (daily) | 24 hr |
| SearXNG | settings.yml → S3 (daily) | 24 hr |
| Komodo | config dir → S3 (daily) | 24 hr |
| Prometheus | TSDB snapshot (daily) | 24 hr |
| Grafana | Covered by docker-volume-sync | 24 hr |
| Uptime Kuma | Covered by docker-volume-sync | 24 hr |
| Prometheus | TSDB snapshot → S3 (daily) | 24 hr |
| Grafana | SQLite DB → S3 (daily) | 24 hr |
| Uptime Kuma | SQLite DB → S3 (daily) | 24 hr |
| DocuSeal | Covered by docker-volume-sync | 24 hr |
| Caddy config | system-config-sync (daily) | 24 hr |
| /root essentials | root-essentials-backup (daily) | 24 hr |
@@ -153,6 +154,6 @@ core-bu (5.161.225.131) automatically syncs from S3 every 10 minutes. To activat
| Gap | Impact | Plan |
|---|---|---|
| No WAL archiving | RPO is 24 hours for most databases | Add WAL-G for Postgres services |
| Ollama models not backed up | 4-8 GB models would need re-download | Low priority — models are reproducible |
| No restore testing | Don't know if backups actually restore | Schedule quarterly restore drill |
| core-bu not tested since upgrade | Standby might not work | Schedule failover test |
| wphost02 S3 upload in progress | First backup running now | Monitor completion |