cayce
d7156358f6
ci / lint-test-leaks (pull_request) Canceled after 0s
RESTORE.md documents the exact from-zero recovery on a fresh VPS: download+verify (sha256 over encrypted artifacts, no private key needed on the pull side), decrypt on the operator Mac, Postgres pg_restore, Gitea unzip+migrate, Caddy/systemd/.env config restore, repo re-clone, backup pipeline reinstall with the SAME age recipient, and a post-restore checklist. E2E test executed on the VPS (no production touched — cayce-ops has no production DB; a probe DB was created and dropped): - manifest.sha256: 3/3 artifacts OK (verified WITHOUT any private key) - age decrypt roundtrip with a throwaway keypair (destroyed afterwards) - pg_restore TOC valid; full restore into a scratch DB: 5000/5000 rows - gitea zip valid, config tar valid (34 entries) - all test material removed: probe DB dropped, throwaway key deleted, recipient file removed, test backup deleted (was encrypted to the destroyed throwaway key)