asxpi/iac
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: restic backups, XMPP and Xray on services, Fossils retired

Browse source 
Describe the new roles, how to list and restore restic snapshots, and
that the restic password must be kept outside the servers.

Assisted-by: Claude:opus-5-5
This commit is contained in:
Sergei Poljanski 2026-11-12 21:03:10 +04:00
commit 59415515a1
3 changed files with 27 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

3
terraform/README.md
View file

@ -7,7 +7,8 @@ Hetzner Cloud infrastructure managed via Terraform.
- **asxpio-ops** (CX23: 2 vCPU, 4GB) - Traefik, Forgejo, app stacks
- **asxpio-services** (CX43: 8 vCPU, 16GB) - CI runner, game servers, SillyTavern
Both have Hetzner daily backups plus delete and rebuild protection.
Both have delete and rebuild protection. Hetzner's server backups are
off; restic backs up the data instead (see ../README.md).
Both servers carry `prevent_destroy` and ignore changes to `user_data`,
`image` and `ssh_keys`: cloud-init only runs at first boot, and hcloud