Backup & Disaster Recovery

The platform implements an automated “Snapshot & Ship” strategy for disaster recovery.

💾 Backup Strategy

A daily cron job (11:00 PM) executes a backup.sh script that performs the following steps:

Database Dump: Runs pg_dumpall inside the PostgreSQL container.
Certificates: Snapshots the Traefik acme.json file to preserve SSL certificates and avoid Let’s Encrypt rate limits on restore.
Bundling: Collects all project directories and .env files.
Cloud Storage: Uploads the compressed .tar.gz archive to a secure AWS S3 bucket.
Cleanup: Deletes the local archive after a successful upload to save disk space.

To restore the environment on a new host:

Extract the backup archive to /root.
Restore SSL certificates: docker cp acme.json traefik_container:/letsencrypt/acme.json.
Startup core infrastructure.
Restore Database: cat dump.sql | docker exec -i db_container psql -U user -d db.

To prevent disk exhaustion, a global Docker policy is enforced via /etc/docker/daemon.json: