7 commits

Author	SHA1	Message	Date
tegwick	dd6dc38e1e	fix(backup): smaller forgejo dump chunks with per-chunk retries ... Use 4m split chunks and up to 8 retries per chunk to survive intermittent kubectl cp/exec websocket EOF on large dumps.	2026-07-12 01:36:00 +02:00
tegwick	ae85effd0c	fix(backup): stream forgejo dump chunks via kubectl exec cat ... kubectl cp still drops websocket on large forgejo dump parts; fall back to exec cat with pod refresh and smaller 8m chunks.	2026-07-12 01:25:48 +02:00
tegwick	e644ce150f	fix(backup): run forgejo dump in-pod to avoid exec websocket EOF ... Long forgejo dump sessions were aborting kubectl exec with websocket close 1006. Launch dump via nohup inside the pod and poll for the zip.	2026-07-12 01:12:41 +02:00
tegwick	de8f11e721	fix(backup): run forgejo dump in-pod to avoid exec websocket EOF ... Long forgejo dump sessions were aborting kubectl exec with websocket close 1006. Launch dump via nohup inside the pod and poll for the zip.	2026-07-12 01:09:49 +02:00
tegwick	a71369d71c	Fix forgejo-backup large dump copy with chunked kubectl cp ... Split in-pod dumps over 50MiB into 16MiB parts with retry to avoid websocket EOF and connection resets on ~700MiB archives.	2026-07-08 00:11:08 +02:00
tegwick	074e7f8441	Add Forgejo daily backup automation (T04/T09 Option A) ... make forgejo-backup runs forgejo dump + pg_dump, age-encrypts, uploads to Nextcloud forgejo/ prefix. Includes dry-run, status, and operator docs.	2026-07-07 17:19:19 +02:00
tegwick	0055e8f3f7	Establish railiance backup credentials in OpenBao (CCR-2026-0004). ... Add workload KV lane for Nextcloud WebDAV token, URL, and age recovery escrow at platform/workloads/railiance/backup/offsite-lane. Apply read policy and OIDC role railiance-backup-workload-kv-read; wire forgejo-backup to load credentials from OpenBao when env is unset.	2026-07-07 17:16:30 +02:00