4 Commits

Author	SHA1	Message	Date
Zareian	4cd859b5fa	216 backups encrypted on 216: pgBackRest (AES-256) + age-encrypted payment CSVs, pushed write-only to 247 with rrsync; health watches pg_stat_archiver and OFFSITE_SYNC_STATUS_FILE; 216 scripts/configs in ops/server216; plaintext pg216 pipeline removed ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-17 19:43:00 +03:30
Zareian	dd98f16d12	Live backup of 216 on 247 (zareian-pg216-* units, Postgres 16 tools in our dir, SCRAM hash only on 216), backup scripts take PGB_ROOT/PGB_BIN/PGB_PORT with 249 defaults, anti-bot layers documented ... Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-17 19:22:56 +03:30
Zareian	8d8665edf3	Payment event ledger (PaymentEvent) replicated to the backup server, plus CSV export script on 247 ... Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-10-13 14:18:47 +03:30
Zareian	a9cccc6550	Live off-site Postgres copy on 247 replaces the nightly pg_dump; backup retention in deploy.sh ... - ops/pgbackup: SSH tunnel + pg_receivewal (slot zareian_247) + daily verified pg_basebackup (keep 7) and a restore check, all run on 78.38.35.247 as systemd units - /api/health reports offsiteBackup (slot active/lag/lost) and warns; OFFSITE_WAL_SLOT setting - removed statuslog backup_db/backup_verify and their health warnings - deploy.sh keeps 3 pre-deploy dumps, 3 local patches, drops manual backups after 30 days - docs: operations backup section, security item 14 closed, CLAUDE.md status Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-10 16:53:10 +03:30