- Porkbun API keys verified working (SUCCESS ping)
- Automated daily AppFlowy postgres backups via systemd timer
- rds_probe: switch from rustls to native-tls (fixes 3 Dependabot alerts)
- ec2-config.nix: add appflowy-backup service and timer
- ec2-configuration.nix: full NixOS config for aws-nixos-node-1
- docker-compose.minimal.yml: AppFlowy Cloud compose with search_path fix
- .env.example: sanitized AppFlowy env template
- nixos-setup-cred-server.sh: credential server bootstrap
- RECOVERY.md: step-by-step rebuild instructions
- .gitignore: secrets dir excluded
- credential_provider.py reverted to repo HEAD (EC2 had hardcoded AWS creds)
- racknerd_root.txt removed from working tree