R-923/R-924: total-loss-of-dooplex runbook (every recovery secret, where it lives, walked on paper), break-glass sheet (names only), Vaultwarden off-site proven (push, restore test, throwaway start); 'off DooPlex' claims corrected; R-924 filed

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-09 12:13:41 +02:00
parent 30b932bb10
commit 4c388a398b
11 changed files with 244 additions and 7 deletions
@@ -0,0 +1,21 @@
+## 2026-10-09T10:02:43Z install from felhom.eu 4cee21ac
+push_rc=0
+2026-10-09T12:02:44+02:00 dooplex felhom-dooplex-offsite[4134357]: felhom-dooplex-offsite: database: 20261009-100001, 6294981 bytes, 2 min old
+2026-10-09T12:04:15+02:00 dooplex felhom-dooplex-offsite[4134357]: felhom-dooplex-offsite: files: 10 repositories, 616 MB
+2026-10-09T12:04:15+02:00 dooplex felhom-dooplex-offsite[4134357]: felhom-dooplex-offsite: secrets: 3 file(s) of 20261009_031011
+2026-10-09T12:04:16+02:00 dooplex felhom-dooplex-offsite[4134357]: felhom-dooplex-offsite: vaultwarden: integrity ok, 1 user(s), files: db.sqlite3 rsa_key.pem
+2026-10-09T12:04:31+02:00 dooplex felhom-dooplex-offsite[4152837]: dooplex.pxar: had to backup 138.87 MiB of 546.853 MiB (compressed 133.173 MiB) in 11.79 s (average 11.783 MiB/s)
+2026-10-09T12:04:31+02:00 dooplex felhom-dooplex-offsite[4152837]: dooplex.pxar: backup was done incrementally, reused 407.983 MiB (74.6%)
+2026-10-09T12:04:32+02:00 dooplex felhom-dooplex-offsite[4134357]: felhom-dooplex-offsite: pushed to ep0 (ns operator, host/dooplex-gitea) in 13 s
+2026-10-09T12:04:32+02:00 dooplex felhom-dooplex-offsite[4134357]: felhom-dooplex-offsite: success signal written
+db.sqlite3
+db.sqlite3-shm
+db.sqlite3-wal
+icon_cache
+lost+found
+rsa_key.pem
+tmp
+felhom_dooplex_offsite_last_success_timestamp_seconds 1791540272
+felhom_dooplex_offsite_last_success_bytes 568894843
+felhom_dooplex_offsite_last_success_repositories 10
+felhom_dooplex_offsite_last_success_vaultwarden_users 1
@@ -0,0 +1,4 @@
+rc=0
+2026-10-09T12:04:40+02:00 dooplex felhom-dooplex-offsite-restore-test[4155906]: felhom-dooplex-offsite-restore-test: restoring host/dooplex-gitea/2026-10-09T10:04:19Z
+2026-10-09T12:05:27+02:00 dooplex felhom-dooplex-offsite-restore-test[4155906]: felhom-dooplex-offsite-restore-test: checked: 27969 files match the manifest, 10 repositories pass git fsck, gitea.dump readable, 3 secrets file(s), Vaultwarden 1 user(s) / 797 item(s)
+2026-10-09T12:05:27+02:00 dooplex felhom-dooplex-offsite-restore-test[4155906]: felhom-dooplex-offsite-restore-test: success signal written
@@ -0,0 +1,37 @@
+## 2026-10-09T10:05:39Z restore on DooPlex (read-only token), Vaultwarden part only to the bench
+restore complete (546.853 MiB processed in 50.5s, average 10.821 MiB/s)    
+total 1136
+drwx------ 2 root root    4096 Oct  9 12:04 .
+drwx------ 6 root root    4096 Oct  9 12:04 ..
+-rw------- 1 root root       2 Oct  9 12:04 USERS
+-rw------- 1 root root 1146880 Oct  9 12:04 db.sqlite3
+-rw-r--r-- 1 root root    1679 Dec  9  2025 rsa_key.pem
+USERS
+db.sqlite3
+rsa_key.pem
+## row counts (python sqlite3, read-only)
+integrity: ok
+users          1 rows
+ciphers        797 rows
+folders        5 rows
+organizations  0 rows
+attachments    0 rows
+sends          0 rows
+twofactor      0 rows
+sso_users      1 rows
+devices        13 rows
+docker.io/vaultwarden/server:1.37.3
+## started on the restored data after ~2 s: /alive -> 200
+## /api/config (public, no login): version 2026.6.0 server Vaultwarden
+## no route out: unreachable
+## 2026-10-09T10:07:13Z teardown — bench
+anon-volumes-of-vw-check=[]
+image-removed
+containers=0 volumes=0
+.bashrc
+.profile
+.ssh
+status: stopped
+## teardown — DooPlex
+.cache
+.kube