Initial VPS operations handbook

2026-08-03 12:26:42 +08:00
commit b73125e5bc
97 changed files with 3641 additions and 0 deletions
@@ -0,0 +1,13 @@
+---
+# Intentionally targets only services with approved local dump/data sources.
+# Set restic_enabled=true only after selecting a backend and provisioning the
+# root-only repository config directly on each target.
+- name: Deploy controlled Restic timers
+  hosts:
+    - vaultwarden
+    - powerdns
+  become: true
+  gather_facts: false
+  roles:
+    - role: restic
+      tags: [restic, backup]