linumiq_net-user
e7a7cafa89
- /docker/backup: borgmatic container (daily 03:00 Berlin via BACKUP_CRON) - Backs up /docker (ro) to local encrypted repo /var/backups/borg (repokey-blake2) - Postgres prod+dev captured via pg_dumpall; live PG data/logs/build artifacts excluded - Retention: keep_daily 7, keep_weekly 4, keep_monthly 6; runs prune/compact/create/check - Secrets in backup/.env (gitignored, chmod 600)
24 lines
494 B
Plaintext
24 lines
494 B
Plaintext
/caddy/data/
|
|
/caddy/config/caddy/autosave.json
|
|
/redis/data/
|
|
/supabase/volumes/
|
|
/web/
|
|
/SECRETS.md
|
|
.env
|
|
# Remediation: keep secret-bearing files out of git
|
|
/frps/frps.toml
|
|
/.remediation-backup/
|
|
/up.sh
|
|
|
|
# Dev environment (mirror of prod ignores; keep secrets/data/volumes out of git)
|
|
/dev/web/
|
|
/dev/.dev-secrets.env
|
|
/dev/frps/frps.toml
|
|
/dev/supabase/volumes/
|
|
/dev/redis/data/
|
|
/dev/stripe-stub/.env
|
|
/dev/bandwidth-worker/.env
|
|
|
|
# Backup service secrets (DB passwords + borg passphrase)
|
|
/backup/.env
|