admin
e2b09f25ea
gates / gates (push) Successful in 6m7s
- S21 / R-887: runner fetch_timeout 30s, Gitea Ingress 2 rps per address (homelab-manifests ad8618f); WATCHING to 2026-10-19
- S22 / R-886: Alertmanager fsGroup 65534; a test silence survived a pod restart (4168451) - closed
- S23 / R-211: Prometheus config-reloader; two automatic reloads, no manual POST (ab40c7b, test e70e0f1/78d4be4) - closed
- S20 / R-231: backup scripts in homelab-ansible/roles/dooplex_backup, installed from git (fdd324b); VERIFY 2026-10-13
- evidence: documentation/audits/answers-2026-10-12/s2{0,1,2,3}-*.txt
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
11 lines
1.1 KiB
Plaintext
11 lines
1.1 KiB
Plaintext
# S20 / R-231 — DooPlex change 4, installed 2026-10-12 ~12:32Z with the operator in the session (yes in chat), homelab-manifests fdd324b
|
|
live before: /opt/backup/scripts = 11 scripts + 4 .bak-<date> copies; units /etc/systemd/system/dooplex-backup.{service,timer} mode 744.
|
|
copied: the 11 scripts (cmp: byte-identical) + the 2 units (cmp: byte-identical) into homelab-ansible/roles/dooplex_backup/files/; .bak copies left out.
|
|
secret check: every file grepped for password/token/key/BEGIN/AKIA/credential URLs; only PATHS found (/etc/backup/restic-password,
|
|
/etc/backup/gitea-token, k3s token paths). No value in any file.
|
|
dry run (--check --diff): scripts ok (identical), units "changed" (mode 744 -> 0644 only).
|
|
install (install.sh --apply): ok=6 changed=1 failed=0; units now 644; timer enabled, next 2026-10-13 03:10:41 CEST; scripts cmp-identical to the repo.
|
|
baseline: dooplex-backup.service last run Result=success, ExecMainStatus=0, exit 2026-10-12 03:16:17 CEST.
|
|
to read 2026-10-13: the same three fields after the 03:10 run (DUE-CHECK R-231).
|
|
undo: the role only rewrote files with identical content; git revert fdd324b removes it from the repo.
|