Maniacs_Mansion/NestQuest
11
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Task 6e203451: Tested restore and deployment runbook #216

Merged
dev_agent merged 2 commits from task/tested-restore-and-deployment-runbook_6e203451-d21c-4298-8145-13b2d86f4679 into feature/911b11a7-bdbb-4305-86f6-d666e181ed51-api-deployment-and-identity 2026-09-24 08:54:46 -04:00
Conversation 1 Commits 2 Files Changed 2
+447 -2
dev_agent commented 2026-09-24 08:43:35 -04:00
Member
Copy Link
Copy Source

Maestro task: 6e203451-d21c-4298-8145-13b2d86f4679 (Feature 17).

Deliverable: deploy/RUNBOOK.md (408 lines, 9 sections: image build, compose, TLS/Traefik, Authentik, secrets, network separation, backup, restore, verification) + an api/README pointer.

Head: eb540d804a
Base: feature/911b11a7-... @ 97b7201

Controller ran the LIVE restore proof on 10.60.1.14 against the Synology replica: stopped api+litestream, deleted the live DB, restored from SFTP, verified both known children present, services healthy, external /health 200.

Maestro task: 6e203451-d21c-4298-8145-13b2d86f4679 (Feature 17). Deliverable: deploy/RUNBOOK.md (408 lines, 9 sections: image build, compose, TLS/Traefik, Authentik, secrets, network separation, backup, restore, verification) + an api/README pointer. Head: eb540d804aab26d7c1771dd4f4a0bce846af9669 Base: feature/911b11a7-... @ 97b7201 Controller ran the LIVE restore proof on 10.60.1.14 against the Synology replica: stopped api+litestream, deleted the live DB, restored from SFTP, verified both known children present, services healthy, external /health 200.
dev_agent added 1 commit 2026-09-24 08:43:36 -04:00
Task 6e203451: Deployment and restore runbook eb540d804a 
Add deploy/RUNBOOK.md: the operator procedure to rebuild the API
deployment end to end (image build, compose and the nestquest-db
volume, Traefik TLS and routing on nukapi-03, Authentik OIDC, secrets,
network separation, Litestream backup), restore the database from the
SFTP replica, and verify the result. Point api/README.md at it.

The restore steps were rehearsed locally against a file replica using
the committed compose file.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
overseer added 1 commit 2026-09-24 08:50:28 -04:00
Task 6e203451: Address runbook review findings F-01..F-03 d1f8f4b15b 
- F-01: document the enforced DOCKER-USER firewall on :8080 (Traefik and
  host RETURN, DROP everyone else), its persisting unit
  nestquest-api-firewall.service, and operator verification commands;
  restore step 6 no longer suggests hitting :8080 from the HA box.
- F-02: restore step 5 uses `dc up -d litestream` so the sidecar is
  created on a fresh box instead of `dc start`, which cannot start a
  never-created container.
- F-03: pin both reference routers to the `websecure` entrypoint.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
review_agent left a comment
Member
Copy Link
Copy Source

Independent Codex gpt-5.6-terra review completed for this exact commit.

Independent Codex gpt-5.6-terra review completed for this exact commit.
dev_agent merged commit 0fc8764455 into feature/911b11a7-bdbb-4305-86f6-d666e181ed51-api-deployment-and-identity 2026-09-24 08:54:46 -04:00
Sign in to join this conversation.
Reviewers
No Reviewers
review_agent
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
approver_agent (The Approver) chatgpt claude-ai Claude-Code codex (Codex) dev_agent grok opencode orchestrator-agent overseer (Joshua) review_agent (The Reviewer)
No Assignees
3 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Maniacs_Mansion/NestQuest#216