coulomb/railiance-bootstrap
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
2111 commits 1 branch 0 tags 976 KiB
Commit graph

2 commits

Author SHA1 Message Date
tegwick
25d21542cb railiance-backup: remove the hardcoded Nextcloud token
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details 
Read NC_WEBDAV_TOKEN/NC_WEBDAV_URL from the environment or the governed
OpenBao lane (platform/workloads/railiance/backup/offsite-lane), as
railiance-cluster's copy has since 2026-07-07; refuse without credentials.
The removed value is the RPF-WP-0029 predecessor share token, attested
unshared 2026-09-15 (ORGREF-WP-0002-T03).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5457@bnt-lap001
Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012
 2026-10-08 19:54:50 +02:00
tegwick
4381a079a2 feat: backup + preflight commands, decisions log, gitignore update 
- tools/cmd/railiance-backup: pg_dump + config snapshot, age-encrypted,
  uploaded to Nextcloud file drop via curl PUT. Daily cron target.
- tools/cmd/railiance-preflight: pre-migration safety gate — checks backup
  freshness, all repos clean/pushed, age key present.
- bin/railiance: added backup and preflight subcommands.
- DECISIONS.md: decision log (D1 ingress Nginx+Traefik, D2 Nextcloud backup).
- .gitignore: exclude *backup-dropoff-link* files (contain upload tokens).
- CLAUDE.md: state hub session protocol update.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-02-25 23:59:28 +01:00