Backup & Recovery

Current Backup Status

What Needs Backing Up

Critical — Data Loss

PostgreSQL (DEV + UAT) — all application data
ImmuDB — immutable audit trail
Garage S3 — uploaded documents/files
Harbor /data/ — all container images

Important — Service Disruption

Keycloak realm — user accounts, client configs
Stack YAML files — all service definitions
Nginx Docker configs — routing rules
WireGuard config — VPN tunnel keys

Manual Database Backup

PostgreSQL Dump

# DEV database backup
docker exec $(docker ps -q -f name=dev_postgresql) \
  pg_dumpall -U postgres | gzip > sseris-dev-$(date +%Y%m%d).sql.gz

# UAT database backup
docker exec $(docker ps -q -f name=uat_postgresql) \
  pg_dumpall -U postgres | gzip > sseris-uat-$(date +%Y%m%d).sql.gz

Restoring from Backup

gunzip -c sseris-dev-20260208.sql.gz | \
  docker exec -i $(docker ps -q -f name=dev_postgresql) psql -U postgres

Manual Harbor Backup

# Stop Harbor services first (optional but safer)
# Then tar the data directory
tar -czf harbor-backup-$(date +%Y%m%d).tar.gz /data/

Manual Config Backup

# Stack files (on Azure)
tar -czf stacks-backup-$(date +%Y%m%d).tar.gz /home/kaks/stacks/

# WireGuard config (on Contabo)
cp /etc/wireguard/wg0.conf ~/wg0-backup-$(date +%Y%m%d).conf

# Docker configs (export all)
for cfg in $(docker config ls -q); do
  docker config inspect $cfg > ~/configs/$cfg.json
done

Recommended Backup Strategy

Data	Frequency	Method	Retention
PostgreSQL (DEV)	Daily	`pg_dumpall` + compress	7 days
PostgreSQL (UAT)	Daily	`pg_dumpall` + compress	7 days
Harbor `/data/`	Weekly	`tar` + compress	4 weeks
Stack YAML files	On change	Git (already in repo)	All history
Keycloak realm	On change	Admin console export	Keep latest
WireGuard config	On change	Copy	Keep latest