Sebastian Krüger 35ddcb2752 feat: add automated backup configuration for all volumes
Added comprehensive backup configuration to Backrest:

**Repository Configuration:**
- Target: /repos (mounted from /mnt/hidrive/users/valknar/Backup)
- Password: falcon-backup-2025
- Auto-initialize and auto-unlock enabled
- Weekly prune schedule (Sundays at 2 AM)
- Weekly integrity checks (Sundays at 3 AM)

**Backup Plans** (11 plans covering all volumes):
1. **postgres-backup** (2 AM daily)
   - PostgreSQL database
   - Retention: 7 daily, 4 weekly, 6 monthly, 2 yearly

2. **redis-backup** (3 AM daily)
   - Redis cache data
   - Retention: 7 daily, 4 weekly, 3 monthly

3. **directus-uploads-backup** (4 AM daily)
   - Directus media files
   - Retention: 7 daily, 4 weekly, 6 monthly, 2 yearly

4. **directus-bundle-backup** (4 AM daily)
   - Directus extensions
   - Retention: 7 daily, 4 weekly, 3 monthly

5. **awesome-backup** (5 AM daily)
   - Awesome app database
   - Retention: 7 daily, 4 weekly, 6 monthly

6. **gotify-backup** (5 AM daily)
   - Gotify notifications
   - Retention: 7 daily, 4 weekly, 3 monthly

7. **scrapy-backup** (6 AM daily)
   - Scrapyd data and spider code
   - Retention: 7 daily, 4 weekly, 3 monthly

8. **n8n-backup** (6 AM daily)
   - n8n workflow data
   - Retention: 7 daily, 4 weekly, 6 monthly

9. **filestash-backup** (7 AM daily)
   - Filestash state
   - Retention: 7 daily, 4 weekly, 3 monthly

10. **linkwarden-backup** (7 AM daily)
    - Linkwarden bookmarks and search index
    - Retention: 7 daily, 4 weekly, 6 monthly

11. **letsencrypt-backup** (8 AM daily)
    - SSL certificates
    - Retention: 7 daily, 4 weekly, 12 monthly, 3 yearly

**Configuration Mount:**
- config.json mounted directly at /config/config.json
- Read-write mode to allow UI updates
- Removed backrest_config volume (using file mount instead)

All backups scheduled at different times to spread I/O load.
Critical data (postgres, directus, letsencrypt) has longer retention.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-06 10:26:04 +01:00
2025-11-05 16:22:56 +01:00
2025-10-25 13:58:11 +02:00

    ___       ___       ___       ___       ___       ___
   /\  \     /\  \     /\__\     /\  \     /\  \     /\__\
  /::\  \   /::\  \   /:/  /    /::\  \   /::\  \   /:| _|_
 /::\:\__\ /::\:\__\ /:/__/    /:/\:\__\ /:/\:\__\ /::|/\__\
 \/\::/  / \/\::/  / \:\  \    \:\ \/__/ \:\/:/  / \/|::/  /
   /:/  /    /:/  /   \:\__\    \:\__\    \::/  /    |:/  /
   \/__/     \/__/     \/__/     \/__/     \/__/     \/__/

THE FALCON

Captain Valknar's Legendary Starship

Status Mission Crew Network Location


🌌 SHIP'S LOG

STARDATE: 2025.10.26 LOCATION: Deep Space, Uncharted Territories STATUS: Captain currently engaged in... diplomatic relations with alien civilizations SYSTEMS: All green, automated deployment active

"The Falcon doesn't just traverse the stars — it commands them." — Captain Valknar, moments before jumping to hyperspace


🛸 VESSEL SPECIFICATIONS

The Falcon is a state-of-the-art containerized starship, powered by Docker's quantum drive engines and orchestrated through the legendary Arty navigation system.

🎯 CORE SYSTEMS

System Purpose Access Point
SEXY Advanced alien encounter database sexy.pivoine.art
AWSM Intergalactic discovery catalog awesome.pivoine.art
TRACK Mission analytics & telemetry umami.pivoine.art
GOTIFY Subspace communication relay gotify.pivoine.art
SCRAPY Web scraping reconnaissance cluster scrapy.pivoine.art
N8N Automated workflow command center n8n.pivoine.art
STASH Universal file management portal stash.pivoine.art
LINKS Interstellar bookmark archive links.pivoine.art
RESTIC Automated backup vault system restic.pivoine.art
PROXY Shield control dashboard proxy.pivoine.art
VPN Cloaking device network vpn.pivoine.art

⚙️ INFRASTRUCTURE

┌─────────────────────────────────────────────────┐
│  🛡️  TRAEFIK SHIELD GENERATOR (Proxy)          │
│  ├─ Auto-SSL via Let's Encrypt Reactor         │
│  ├─ HTTP → HTTPS Phase Shifters                │
│  ├─ Load Balancer Stabilizers                  │
│  ├─ Dashboard Command Center                   │
│  └─ Sablier Dynamic Scaling Plugin             │
├─────────────────────────────────────────────────┤
│  💾 POSTGRESQL 16 DATA CORE                    │
│  ├─ Directus Sector Database                   │
│  ├─ Umami Analytics Vault                      │
│  ├─ n8n Workflow Engine Database               │
│  └─ Linkwarden Bookmark Archive                │
├─────────────────────────────────────────────────┤
│  ⚡ REDIS CACHE HYPERDRIVE                     │
│  └─ Warp-speed data acceleration               │
├─────────────────────────────────────────────────┤
│  🔐 BACKREST BACKUP VAULT (Restic)             │
│  ├─ Automated volume snapshots                 │
│  ├─ Incremental backup engine                  │
│  └─ HiDrive remote repository                  │
└─────────────────────────────────────────────────┘

🚀 LAUNCH SEQUENCE

Prerequisites

  • Docker Engine v20+ installed
  • Docker Compose v2.20+ installed
  • Arty navigation system (npm install -g arty or pnpm add -g arty)
  • Clearance level: Captain

🔧 Initialize Ship Systems

# Create the ship's neural network
arty net/create

# Launch all systems
arty up

# Monitor system status
arty ps

# Access ship's logs (real-time)
arty logs

📡 Individual System Control

# Power down specific systems
arty down

# Restart malfunctioning modules
arty restart

# Pull latest system updates from the mothership
arty pull

# Diagnostic report
arty config

💫 NAVIGATION COMMANDS

Database Operations (SEXY Mission)

# Create database backup before alien encounter
arty db/dump

# Restore database after timeline anomaly
arty db/import

# Export exotic alien artifacts (uploads)
arty uploads/export

# Import artifacts to new timeline
arty uploads/import

Deployment & Sync

# Synchronize .env to remote starbase
arty env/sync

🌠 SHIP ARCHITECTURE

THE FALCON (falcon_network)
│
├─ 🎯 CORE SERVICES
│  ├─ PostgreSQL 16      [Port 5432] → Data Vault
│  └─ Redis 7            [Internal]  → Cache Drive
│
├─ 🛡️ SECURITY LAYER
│  ├─ Traefik            [80/443]    → Shield Generator
│  ├─ Traefik Dashboard  [proxy.pivoine.art] → Control Center
│  └─ Sablier            [Internal]  → Scale-to-Zero Engine
│
├─ 🚀 APPLICATIONS
│  ├─ Directus API       [sexy.pivoine.art/api]
│  ├─ SvelteKit Frontend [sexy.pivoine.art]
│  ├─ Awesome Catalog    [awesome.pivoine.art]
│  ├─ Umami Analytics    [umami.pivoine.art]
│  ├─ Gotify Messenger   [gotify.pivoine.art]
│  ├─ Scrapyd Cluster    [scrapy.pivoine.art]
│  ├─ n8n Workflows      [n8n.pivoine.art]
│  ├─ Filestash Files    [stash.pivoine.art]
│  ├─ Linkwarden Marks   [links.pivoine.art]
│  ├─ Backrest Backups   [restic.pivoine.art]
│  └─ WireGuard VPN      [vpn.pivoine.art]
│
└─ 💾 STORAGE VOLUMES
   ├─ postgres_data      → Critical mission data
   ├─ directus_uploads   → Alien encounter evidence
   ├─ directus_bundle    → Custom modules
   ├─ awesome_data       → Discovery catalog
   ├─ scrapyd_data       → Web scraping archives
   ├─ scrapy_code        → Spider project code
   ├─ n8n_data           → Workflow configurations
   ├─ filestash_data     → File manager state
   ├─ linkwarden_data    → Bookmark archives
   ├─ meili_data         → Search index database
   ├─ backrest_data      → Backup system state
   ├─ backrest_config    → Backup configurations
   └─ letsencrypt_data   → Shield certificates

🎨 TECHNOLOGY STACK

Docker Traefik PostgreSQL Redis Directus Svelte Next.js


⚠️ PROTOCOLS & SECURITY

🔐 ENCRYPTION STANDARD
├─ All transmissions encrypted via HTTPS
├─ Let's Encrypt quantum certificates
├─ TLS 1.2+ with strong cipher suites only
├─ HSTS enabled (1-year, preload ready)
└─ SNI strict mode enforced

🛡️ SECURITY HEADERS
├─ X-Frame-Options: SAMEORIGIN
├─ X-XSS-Protection enabled
├─ Content-Type-Options: nosniff
├─ Referrer-Policy configured
└─ Permissions-Policy restrictions

🔒 ACCESS CONTROL
├─ Admin credentials in .env vault
├─ Database authentication: scram-sha-256
├─ HTTP Basic Auth on sensitive endpoints
├─ Rate limiting available (100 req/s)
└─ VPN cloaking device enabled

📊 MISSION STATUS

╔═══════════════════════════════════════╗
║  SHIP'S VITAL SIGNS                   ║
╠═══════════════════════════════════════╣
║  ✅ Core Systems      → OPERATIONAL   ║
║  ✅ Shield Generator  → ONLINE        ║
║  ✅ Database Vault    → SECURED       ║
║  ✅ Cache Drive       → OPTIMIZED     ║
║  🌟 Captain Status    → ON ADVENTURE  ║
╚═══════════════════════════════════════╝

👽 CAPTAIN'S NOTES

Currently out exploring the cosmos and making friends with alien species. You know how it is — one minute you're charting a nebula, the next you're at an intergalactic party.

If systems malfunction, check the logs. If things are really bad, I left a backup captain AI (it's called documentation).

Stay shiny, crew. Valknar out.


📡 TRANSMISSION CHANNELS


╔═══════════════════════════════════════════════════════════╗
║                                                           ║
║     "In space, no one can hear you `docker compose up`"   ║
║                                                           ║
║              — Captain Valknar, The Falcon                ║
║                                                           ║
╚═══════════════════════════════════════════════════════════╝

Made with Docker Arty Captain

THE FALCONFastest ship in the Docker registryEST. 2025

Description
No description provided
Readme 78 MiB
Languages
Shell 72.8%
Dockerfile 20.3%
Elixir 6.9%