docs: ADR 0027 — automated restore drill #17

Sammanfogat
supernaut sammanfogade 3 incheckningar från adr-0027-restore-drill in i main 2026-07-11 20:40:39 +00:00
Ägare

Adds ADR 0027 — Automated end-to-end restore drill and documents it in architecture.md (Backups section + flow diagram).

Records the decision behind the weekly restore drill implemented in gitborg/gitborg-infra#40:

  • services-host orchestration (not CI) — keeps OpenStack + decrypt privileges off the shared runner pool
  • restores the off-site copy, decrypted with the verify key (offline DR key stays offline)
  • throwaway-VM restore + forgejo doctor (default suite), always torn down (no floating IPs)
  • weekly cadence, bounded by the 14-day retention window
  • alerting via BackupDrillFailed / BackupDrillStale

Relates to ADR 0011 (off-site S3), ADR 0021 (ephemeral VMs), ADR 0022 (backup volume), ADR 0020 (alerting).

Epic: #2
Implements: gitborg/gitborg-infra#40

Adds **ADR 0027 — Automated end-to-end restore drill** and documents it in `architecture.md` (Backups section + flow diagram). Records the decision behind the weekly restore drill implemented in gitborg/gitborg-infra#40: - services-host orchestration (not CI) — keeps OpenStack + decrypt privileges off the shared runner pool - restores the **off-site** copy, decrypted with the **verify** key (offline DR key stays offline) - throwaway-VM restore + `forgejo doctor` (default suite), always torn down (no floating IPs) - weekly cadence, bounded by the 14-day retention window - alerting via `BackupDrillFailed` / `BackupDrillStale` Relates to ADR 0011 (off-site S3), ADR 0021 (ephemeral VMs), ADR 0022 (backup volume), ADR 0020 (alerting). Epic: #2 Implements: gitborg/gitborg-infra#40
supernaut lade till 3 incheckningar 2026-07-11 20:18:35 +00:00
Record the decision behind the weekly end-to-end restore drill: services-host
orchestration (not CI), off-site + verify-key decrypt, throwaway-VM restore +
forgejo doctor, weekly cadence bounded by the 14-day retention window.

Epic: #2
Implements: gitborg/gitborg-infra#40
forgejo doctor runs the default check suite (not --all).

Implements: gitborg/gitborg-infra#40
docs: document the restore drill in architecture (#40)
Alla kontroller lyckades
ci / ci (pull_request) Successful in 12s
a7e75f6e3f
Add the weekly ephemeral-VM restore drill to the Backups section + flow
diagram alongside the structural verify (ADR 0027).

Implements: gitborg/gitborg-infra#40
supernaut tvångsskickade adr-0027-restore-drill från a7e75f6e3f
Alla kontroller lyckades
ci / ci (pull_request) Successful in 12s
till c6be1b3e68
Alla kontroller lyckades
ci / ci (pull_request) Successful in 11s
2026-07-11 20:39:30 +00:00
Jämför
supernaut sammanfogade incheckning 91440a9584 till main 2026-07-11 20:40:39 +00:00
supernaut tog bort grenen adr-0027-restore-drill 2026-07-11 20:40:39 +00:00
supernaut refererade denna ändringsförfrågan från en incheckning 2026-07-11 20:40:40 +00:00
supernaut refererade denna ändringsförfrågan från en incheckning 2026-08-03 09:41:31 +00:00
Logga in för att delta i denna konversation.
Inga granskare
Ingen milstolpe
Inget projekt
Inga tilldelade
1 deltagare
Notiser
Förfallodatum
Förfallodatumet är ogiltigt eller utanför gränserna. Använd formatet "åååå-mm-dd".

Inget förfallodatum satt.

Beroenden

Inga beroenden satta

Referens
bitborg/bitborg-docs!17
Ingen beskrivning angiven.