mirror of
https://github.com/allaunthefox/Research-Stack.git
synced 2026-07-31 03:05:21 +00:00
d4603644d2
- ec2-configuration.nix: full NixOS config for aws-nixos-node-1 - docker-compose.minimal.yml: AppFlowy Cloud compose with search_path fix - .env.example: sanitized AppFlowy env template - nixos-setup-cred-server.sh: credential server bootstrap - RECOVERY.md: step-by-step rebuild instructions - .gitignore: secrets dir excluded - credential_provider.py reverted to repo HEAD (EC2 had hardcoded AWS creds) - racknerd_root.txt removed from working tree
25 lines
1.2 KiB
Markdown
25 lines
1.2 KiB
Markdown
# Recovery Guide
|
|
|
|
If EC2 server aws-nixos-node-1 (100.69.1.43) dies, rebuild from these files.
|
|
|
|
## Critical Files (committed to repo)
|
|
- `ec2-configuration.nix` — Full NixOS config (Caddy routes, AppFlowy, Forgejo, credential server)
|
|
- `docker-compose.minimal.yml` — Custom AppFlowy Cloud compose (in 5-Applications/AppFlowy-Cloud/)
|
|
- `nixos-setup-cred-server.sh` — Credential server bootstrap
|
|
- `credential_provider.py` — Credential resolution chain
|
|
- `credential_server.py` — Webhook handler
|
|
- `.env.example` — Sanitized AppFlowy Cloud env template
|
|
|
|
## Critical Files (NOT committed — in `secrets/` dir, gitignored)
|
|
- `credentials.json` — All 8 API provider keys
|
|
- `appflowy.env` — AppFlowy Cloud env (RDS host, JWT, encryption key)
|
|
- `tailscale-auth.key` — Tailscale auth key
|
|
|
|
## Recovery Flow
|
|
1. Launch new NixOS EC2 → copy `ec2-configuration.nix` to `/etc/nixos/`
|
|
2. Restore secrets from gitignored backup
|
|
3. `nixos-rebuild switch` — brings up Caddy, credential server, Forgejo, Heimdall
|
|
4. Deploy AppFlowy: copy compose + `.env` to `/var/lib/AppFlowy-Cloud/`, start stack
|
|
5. RDS (2,685 records) survives independently — reconnect AppFlowy to it
|
|
6. Forgejo repos lost unless backed up separately
|
|
7. Heimdall tiles lost unless backed up separately
|