Add backup status report — 27 targets, zero unbacked

2026-08-08 20:53:22 -04:00
parent 069cbacca4
commit db0eed41d2
1 changed files with 64 additions and 0 deletions
@@ -0,0 +1,64 @@
+# Backup Coverage — Full Status Report
+**Date:** August 8, 2026
+
+## Inventory: 27 Targets, Zero Unbacked
+
+| Tier | Server | Services | Status |
+|:-----|:-------|:---------|:------:|
+| Core | 152.53.192.33 | Hermes, Grafana, Uptime Kuma, Prometheus, Docker volumes, Auth API, /root | ✅ |
+| App1 | 152.53.36.131 | Open WebUI, LiteLLM, n8n, MCP configs, Vaultwarden, Komodo, DocuSeal, Twenty CRM | ✅ |
+| App2 | 152.53.39.202 | Hudu, Gitea, UNMS, UniFi, Traccar, Technitium DNS, Dawarich, RAGFlow | ✅ |
+| App3 | 152.53.241.111 | CloudPanel, MySQL, WordPress, Nginx, Static sites (incl. modelortho), WP snapshots, Hexclave | ✅ |
+| wphost02 | 5.161.62.38 | 7 WordPress sites + all DBs | ✅ |
+| Home | MikroTik CCR2004 | Router config export (.rsc) | ✅ |
+| External | Hetzner Cloud | Weekly disk snapshots | ✅ |
+
+**Previously unbacked services (14) now fully covered.** Dawarich, RAGFlow, Auth API, Technitium DNS, and Hexclave were the last gaps — all closed today.
+
+---
+
+## Recovery Readiness
+
+| Tier | Services | RPO | RTO |
+|:-----|:---------|:----|:----|
+| Critical | Hermes, Gitea, Traccar, UISP | ≤ 1 hr | ≤ 4 hrs |
+| High | LiteLLM, n8n, Open WebUI, Vaultwarden, Twenty | 24 hrs | ≤ 8 hrs |
+| Medium | Hudu, UniFi, Komodo, DocuSeal, App3 WP, Auth API, Hexclave | 24 hrs | ≤ 24 hrs |
+| Low | Grafana, Uptime Kuma, Prometheus, MikroTik, Technitium, Dawarich, RAGFlow | 24 hrs | ≤ 48 hrs |
+
+---
+
+## DR Position
+
+- **Live Core:** netcup VPS — `core.itpropartner.com` — `152.53.192.33`
+- **Standby:** Hetzner CPX21 — `app1-bu.itpropartner.com` — `5.161.225.131`
+  - Checks live Core every 10 min, takes over if down
+  - Auto-restores from `s3://hermes-vps-backups/hermes-full-backup/`
+  - Provider diversity: netcup outage ≠ standby outage
+- **24 backup scripts** on Core, 1 on App3, 1 on wphost02
+- **Storage:** Wasabi S3 (us-east-1)
+
+---
+
+## Today's Commits
+
+```
+069cbac Fold modelortho into shared app3 backup — no standalone job
+e752753 Add modelortho.com backup — daily at 4:30 AM ET to Wasabi S3
+48ccd25 Document modelortho.com — Anita's independent ortho consulting platform
+53d94a7 M9: DNS cleanup — remove 2 stale iamgmb.com records
+76185d7 H8: Fix stale docs — model chain + schedule table
+```
+
+---
+
+## Minor Cleanup Needed
+
+- **Stale S3 paths** — 4 marked for deletion (`core/vaultwarden/`, `core/twenty/`, `core/searxng/`, `core/komodo/`) + 2 unused (`caddy/`, `snapshots/`). All from July migration, safe to delete.
+- **Backup plan stale row** — `modelortho-backup.sh` at 4:30 AM still listed in inventory and schedule tables; script was deleted after folding into shared `app3-backup.sh`.
+
+---
+
+## Bottom Line
+
+Everything that can be backed up, is. Nothing running without coverage.