cayce fc2dcd4fca backup: backup-pull user — read-only rsync-only SSH access (Tanda B, point 2) ...

System user backup-pull created on the VPS (no sudo, locked password).
authorized_keys restricted with restrict + forced command
rrsync -ro /var/backups/cayce. Verified with a since-deleted throwaway
key: no shell, no arbitrary commands, no sftp/scp, no reads outside
/var/backups/cayce, no writes; the positive rsync pull works.

authorized_keys is left EMPTY — the operator adds their real key with
the exact line documented in deploy/backup/backup-pull-setup.md.

2026-10-28 21:01:44 +00:00

..

backup

backup: backup-pull user — read-only rsync-only SSH access (Tanda B, point 2)

2026-10-28 21:01:44 +00:00

systemd

backup: encrypted daily backups — VPS generates, Mac pulls (Tanda B, point 1)

2026-10-28 20:59:28 +00:00

roles.sql

audit-3 (critical 1 deploy half): roles.sql rewritten + PG integration test

2026-10-20 02:20:26 +00:00