impl(backup): offsite+local backup of unique knowledge — rclone-crypt pCloud (per ADR-0013) #698

New issue

Closed

opened 2026-06-02 23:39:18 +02:00 by claude · 0 comments

claude commented

2026-06-02 23:39:18 +02:00

Collaborator

Per ADR-0013 (reworked) — implement the offsite + local backup of unique knowledge

Supersedes #569 (Synology-specific). Topology: RS2000 (live) → local copy [MacBook cold | Synology hot] + pCloud offsite via rclone crypt. Folds into roadmap Phase-1 backup-continuity (#674).

Scope (Codex authors scripts; operator does the credential/host setup)

rclone config — a plain pCloud remote + a Crypt remote wrapping it (client-side encryption). The crypt password/salt live in Infisical / keychain, never in the repo. (Operator: authorize rclone against pCloud + set the crypt key once.)
Backup script (scripts/backup/): collect the unique knowledge only —
- Forgejo repos + DB dump, main Postgres unique data dump, Infisical state, OpenClaw/Iskra workspace + Obsidian vault, platformctl desired-state, host env/version files.
- → write to a configurable local path (MacBook or Synology), then rclone crypt sync to pCloud.
- Exclude reproducible images/volumes.
Local node setup (if MacBook): a LaunchDaemon for the schedule + caffeinate/pmset no-sleep (HDMI-dummy already keeps it awake). (Operator-side host config.)
Restore-check (scripts/backup/restore_check.sh): periodically restore a sample to a throwaway location and verify integrity — verify restore, not just backup creation (Phase-1 requirement).
Receipts: each run logs {what, size, dest, ts, restore_verified} — no secret values, no raw content.

Acceptance

rclone crypt remote configured (key in Infisical/keychain); a test file round-trips encrypted to pCloud + back.
Backup script captures the unique-knowledge set to the local path + crypt-syncs to pCloud.
Local node stays awake on schedule (MacBook) — verified.
Restore-check passes on a real sample (live-verified, not "script written").
No secrets/raw content in logs or committed.

Ties

ADR-0013 (reworked), #569 (superseded), #674 Phase-1. Backup set ~few GB (unique knowledge).

Decision by claude (ADR); scripts = Codex lane; pCloud-auth + Mac host config = operator. Close on live-verified restore, not on "script written".

## Per ADR-0013 (reworked) — implement the offsite + local backup of unique knowledge Supersedes #569 (Synology-specific). Topology: **RS2000 (live) → local copy [MacBook cold | Synology hot] + pCloud offsite via `rclone crypt`.** Folds into roadmap Phase-1 backup-continuity (#674). ### Scope (Codex authors scripts; operator does the credential/host setup) 1. **rclone config** — a plain pCloud remote + a **Crypt remote wrapping it** (client-side encryption). The crypt password/salt live in **Infisical / keychain**, never in the repo. *(Operator: authorize rclone against pCloud + set the crypt key once.)* 2. **Backup script** (`scripts/backup/`): collect the **unique knowledge only** — - Forgejo repos + DB dump, main Postgres unique data dump, Infisical state, OpenClaw/Iskra workspace + Obsidian vault, `platformctl` desired-state, host env/version files. - → write to a **configurable local path** (MacBook or Synology), then `rclone crypt` sync to pCloud. - Exclude reproducible images/volumes. 3. **Local node setup** (if MacBook): a `LaunchDaemon` for the schedule + `caffeinate`/`pmset` no-sleep (HDMI-dummy already keeps it awake). *(Operator-side host config.)* 4. **Restore-check** (`scripts/backup/restore_check.sh`): periodically restore a sample to a throwaway location and verify integrity — **verify restore, not just backup creation** (Phase-1 requirement). 5. **Receipts**: each run logs `{what, size, dest, ts, restore_verified}` — no secret values, no raw content. ### Acceptance - [ ] rclone crypt remote configured (key in Infisical/keychain); a test file round-trips encrypted to pCloud + back. - [ ] Backup script captures the unique-knowledge set to the local path + crypt-syncs to pCloud. - [ ] Local node stays awake on schedule (MacBook) — verified. - [ ] Restore-check passes on a real sample (live-verified, not "script written"). - [ ] No secrets/raw content in logs or committed. ### Ties ADR-0013 (reworked), #569 (superseded), #674 Phase-1. Backup set ~few GB (unique knowledge). *Decision by claude (ADR); scripts = Codex lane; pCloud-auth + Mac host config = operator. Close on live-verified restore, not on "script written".*

claude added this to the 10 - Improvements milestone

2026-06-02 23:39:18 +02:00

claude added the

agent/codex

status:codex-ready

priority:p2

labels

2026-06-02 23:39:18 +02:00

claude referenced this issue

2026-06-02 23:39:18 +02:00

WIP: ops: ADR-0013 4th replica — Synology + encrypted pCloud #569