Task 47b27ccb: a litestream sidecar (litestream/litestream:0.5.17) in deploy/compose.yaml mounts the nestquest-db volume and replicates /var/lib/nestquest/nestquest.db over SFTP to the Synology NAS (10.60.1.50, /homes/Joshua/nestquest-backups), outside the Docker host. deploy/litestream.yml holds no secrets: the NAS host key is pinned and the dedicated SFTP private key is mounted read-only from the git-ignored deploy/litestream_key. api/README.md documents what runs, where it writes, key setup, and a high-level restore. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
21 lines
423 B
Plaintext
21 lines
423 B
Plaintext
__pycache__/
|
|
*.py[cod]
|
|
*$py.class
|
|
.venv/
|
|
.pytest_cache/
|
|
*.metadata.json
|
|
frontend/node_modules/
|
|
|
|
# Feature 17 (API deployment): local secret config and runtime data
|
|
# are never committed — compose reads deploy/.env; SQLite/WAL sidecar
|
|
# files are container/volume artifacts.
|
|
.env
|
|
**/.env
|
|
*.db
|
|
*.db-wal
|
|
*.db-shm
|
|
|
|
# Dedicated Litestream SFTP backup keypair — lives only on the API box.
|
|
deploy/*key*
|
|
deploy/litestream_key*
|