sam-4screen-desktop 2026-9-6:11:39:8

200 projects/220 Web Host Migration/Migration Work Log.md

@@ -197,6 +197,12 @@ where-woof.com outgoing (transactional) email:
 - **Plan:** dump critical DBs to an already-backed-up path before the backup runs.
 - **.13 (done, dumps tested):** `db-dump-13.sh` dumps **outline, wherewoof-db, family-home-lab(portal), langfuse, ai-resume, airflow** Postgres via container-env creds (no secrets in config) → `~/Docker/Containers/<app>/backups/db-dumps/` (inside Borg `~/Docker` paths, keep-3). Tested: 201K/31K/6K/278K/824/197K dumps written.
 - **Pending:** wire .13 timer (03:30 pre-Borg); do .35 Tier-A (vikunja + others) via Backrest pre-hook or dump script.
+
+## TIER-A DB HARDENING — IMPLEMENTATION (2026-09-06)
+- **.13** (`~/.Docker → Borg`): `db-dump-13.sh` + NixOS module `dbdump.nix` → timer **03:30** pre-Borg. Dumps outline, wherewoof-db, family-home-lab(portal), langfuse, ai-resume, airflow PG → `~/Docker/Containers/<app>/backups/db-dumps/` (in Borg paths). **Fixed:** service must run `User=root` (/home/sam/Docker is root-owned) — rebuild applied 2026-09-06.
+- **.35** (`/Docker/Containers → Backrest`): `db-dump-35.sh` + systemd unit/timer → **03:35** daily. Dumps vikunja(mariadb via env pw), gitea(mysqldump, pw `sam4jo`), affine, immich, paperless (pg via env) → `/Docker/Containers/<app>/backups/db-dumps/` (in restic path). Timer installed+enabled; verified affine 2MB dump works.
+- **Notes:** Backrest image lacks pg/mysql/docker clients → used host systemd timer (root) instead of Backrest hooks. firefly_iii compose not found under /Docker/Containers/firefly_iii (Tier-B anyway; skip). Gitea root pw `sam4jo` stored in root-only script.
+- **Awaiting:** .13 rebuild (User=root) + first automatic fires tonight/tomorrow 03:30/03:35.
 1. SES console → Send test email (audasmedia.com.au → samuelrolfe@gmail.com); check delivery + DKIM/SPF pass.
 2. Request SES production access (free).
 3. Then return to Phase 3 (local infra) / CMS migration project.