dooplex-offsite: failure mail survives the shared config's unset variable (found by the live dry run); Part B push + restore evidence

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-09 10:15:10 +02:00
parent 1707c928a9
commit 02a54e26f5
8 changed files with 103 additions and 3 deletions
@@ -9,7 +9,8 @@
 - `felhom-dooplex-offsite-restore-test` (Sun 05:30, read-only token): manifest check, repo count, `git fsck` on every
  repository through a scratch repo with a known config (the pod's `config` files are never read by root git),
  `pg_restore --list`, secrets present.
- `felhom-backup-failmail@.service`: `OnFailure=` mail through R-232 (a)'s `notify_failure`; also added to both
+- `felhom-backup-failmail@.service`: `OnFailure=` mail through R-232 (a)'s `notify_failure` (no `set -u`: the live dry run
+  found it dying on the shared config's unset `NOTIFY_WEBHOOK_URL`; red-proved); also added to both
  hub-DB units (`scripts/hub-db-backup/*.service`).
 - 20 tests (`test_dooplex_offsite.py`; fakes for kubectl/PBS/pg_restore, real git/tar), green with GNU and BusyBox
  tools; red-proofs for 6 checks in `audits/dooplex-survival-2026-10-09/partB/red-proof.txt`.