coulomb/disaster-control
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Complete DISCTL-WP-0002-T06 and finish resilience foundation

Browse source 
Record automated Forgejo backup decrypt drill evidence, update
registers and pickup queue (item 3 in progress). Mark WP-0002
finished — 8/8 tasks done.
This commit is contained in:
tegwick 2026-07-07 20:57:12 +02:00
parent f0928db33d
commit e6bf52dbc4
7 changed files with 123 additions and 31 deletions
Download patch file Download diff file Expand all files Collapse all files

18
TestEvidence/README.md
View file

@ -44,11 +44,15 @@ in `BackupPolicy.md` §7).
## Next untested targets
Priority order after Forgejo manual drill (2026-07-04):
Completed drills:
1. **S2 k8s runtime** — decrypt `railiance-backup-s2` artifact on clean target;
validate Helm values redeploy
2. **Dev workstation cold restore** — decrypt Nextcloud artifact without using
production key on same machine (password-manager key only)
3. **Gitea dump** — manual `gitea dump` restore to staging before next migration wave
4. **Secret vault cold decrypt** — SOPS/age recovery material (R5 mitigation)
- 2026-07-04 — Forgejo manual isolated restore
- 2026-07-07 — Forgejo automated backup decrypt + validate
Next targets:
1. **Forgejo from Nextcloud only** — promotion gate (`BackupPolicy.md` §7)
2. **S2 k3s runtime** — decrypt `railiance-backup-s2` on railiance01
3. **Dev workstation cold restore** — password-manager key only
4. **Gitea dump** — before next migration wave
5. **Secret vault cold decrypt** — SOPS/age recovery material (R5)