admin

OpeItcLoc03/admin

Fork 0

Commit Graph

Author	SHA1	Message	Date
vitya	8db4b0d71c	tasks(ruvds-backup-daily-kreknin): close 🟢 — live на 04:30 MSK daily End-to-end pipeline отработан, run #1 verified 20 sec, 8.8 GB snolla + IIS configs + 14 certs + sshd state → /volume1/NetBackup/ruvds-iis/<date>/ на kreknin. Retention 7 daily, ntfy vds-backup topic. Scripts checked into scripts/ruvds-backup-daily-kreknin/: - setup.ps1 (one-time install: SSH key + rclone + configs + ScheduledTask) - run.ps1 (live backup logic; Invoke-Rclone wrapper для NOTICE-on-stderr) - README.md (decisions log, smoke instructions, atomic revert) Bugs found and fixed during smoke (см. README Decisions log): 1. Backup-WebConfiguration -Force параметра нет → check + Remove first 2. rclone --log-file lock с PS Start-Transcript → drop --log-file 3. rclone NOTICE на stderr + $ErrorActionPreference=Stop → Invoke-Rclone wrapper temporarily switches к Continue 4. ssh-keyscan known_hosts не parsится rclone go-sftp → drop pinning, rely on key-auth Закрывает "Backup strategy для RUVDS IIS" Open question в [iis-migration-to-ruvds]. Open follow-ups (не блокер): - PFX export pass plaintext в скрипте — TODO move to gpg/DPAPI - Retention prune (kept 1 today) — verify в day 8 - Phone-side ntfy push — user verifies Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-24 11:49:44 +03:00
vitya	df5878cdad	tasks: + [ruvds-backup-daily-kreknin] ⚪ ready — параллель к VDS backup Создаю задачу пока [iis-migration-to-ruvds] в soak window. Закрывает Open-question "Backup strategy для RUVDS IIS" из migration task. Pattern параллель [vds-backup-rsync-kreknin] 🟢 — daily backup → kreknin synology, 7 daily snapshots retention, ntfy на vds-backup topic. Differences vs VDS: - Win Server 2025 Core → rclone single-binary, не rsync (no cygwin/WSL) - Task Scheduler SYSTEM-account, не cron-root - 04:30 MSK (за 30 мин до VDS backup чтобы не пересекать uplink) - Backup scope: C:\sites\snolla + applicationHost.config + IIS native Backup-WebConfiguration + cert store PFX export + sshd config Decisions log в task file: tool=rclone (rejected restic encrypted-dedupe как overkill для transitional setup, robocopy-over-SMB fragile); SYSTEM-principal mirrors VDS root-cron pattern; PFX export pass=temp 'pfximport' (TODO: pass-equivalent на Windows когда найдём). Open questions для решения user'а: when to start (recommend сейчас, не ждать full cutover), kreknin SSH ACL add pubkey to authorized_keys (требует user action). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-24 10:11:34 +03:00

Author

SHA1

Message

Date

vitya

8db4b0d71c

tasks(ruvds-backup-daily-kreknin): close 🟢 — live на 04:30 MSK daily

End-to-end pipeline отработан, run #1 verified 20 sec, 8.8 GB snolla +
IIS configs + 14 certs + sshd state → /volume1/NetBackup/ruvds-iis/<date>/
на kreknin. Retention 7 daily, ntfy vds-backup topic.

Scripts checked into scripts/ruvds-backup-daily-kreknin/:
- setup.ps1 (one-time install: SSH key + rclone + configs + ScheduledTask)
- run.ps1 (live backup logic; Invoke-Rclone wrapper для NOTICE-on-stderr)
- README.md (decisions log, smoke instructions, atomic revert)

Bugs found and fixed during smoke (см. README Decisions log):
1. Backup-WebConfiguration -Force параметра нет → check + Remove first
2. rclone --log-file lock с PS Start-Transcript → drop --log-file
3. rclone NOTICE на stderr + $ErrorActionPreference=Stop → Invoke-Rclone
   wrapper temporarily switches к Continue
4. ssh-keyscan known_hosts не parsится rclone go-sftp → drop pinning,
   rely on key-auth

Закрывает "Backup strategy для RUVDS IIS" Open question в
[iis-migration-to-ruvds].

Open follow-ups (не блокер):
- PFX export pass plaintext в скрипте — TODO move to gpg/DPAPI
- Retention prune (kept 1 today) — verify в day 8
- Phone-side ntfy push — user verifies

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-24 11:49:44 +03:00

vitya

df5878cdad

tasks: + [ruvds-backup-daily-kreknin] ⚪ ready — параллель к VDS backup

Создаю задачу пока [iis-migration-to-ruvds] в soak window. Закрывает
Open-question "Backup strategy для RUVDS IIS" из migration task.

Pattern параллель [vds-backup-rsync-kreknin] 🟢 — daily backup → kreknin
synology, 7 daily snapshots retention, ntfy на vds-backup topic.

Differences vs VDS:
- Win Server 2025 Core → rclone single-binary, не rsync (no cygwin/WSL)
- Task Scheduler SYSTEM-account, не cron-root
- 04:30 MSK (за 30 мин до VDS backup чтобы не пересекать uplink)
- Backup scope: C:\sites\snolla + applicationHost.config + IIS native
  Backup-WebConfiguration + cert store PFX export + sshd config

Decisions log в task file: tool=rclone (rejected restic encrypted-dedupe
как overkill для transitional setup, robocopy-over-SMB fragile);
SYSTEM-principal mirrors VDS root-cron pattern; PFX export pass=temp
'pfximport' (TODO: pass-equivalent на Windows когда найдём).

Open questions для решения user'а: when to start (recommend сейчас, не
ждать full cutover), kreknin SSH ACL add pubkey to authorized_keys
(требует user action).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-24 10:11:34 +03:00

2 Commits