sam-4screen-desktop 2026-8-28:15:24:8

200 projects/220 Web Host Migration/Migration Work Log.md

@@ -0,0 +1,43 @@
+---
+created: 2026-08-28
+modified: 2026-08-28
+type: log
+client: sam
+project: web-host-migration
+status: active
+priority: 1
+tags:
+  - migration
+  - log
+aliases:
+  - migration-work-log
+  - work-log
+id: 1848129023-LOG
+---
+# Migration Work Log
+
+> Central log of what has been **done** across the migration phases.
+> Update this as work completes. Each entry: **date · phase · what · evidence**.
+
+## Phase legend
+- **P0** Pre-flight · **P1** AWS offsite · **P2** Email · **P3** Local infra · **P4** CMS (separate) · **P5** Decommission
+
+---
+
+## 2026-08-28
+| Phase | What was done | Notes/Evidence |
+|---|---|---|
+| P0 | Verified no AWS CLI / rclone / creds on `.13` (clean slate) | `command -v aws` empty; `rclone` empty on `.13` |
+| P0 | Verified existing backup stack on `.13` | Borg 1.4.3 in `backup.nix` (`services.borgbackup.jobs.*`, timers 04:00/05:00/06:00, BORG_RSH wrapper for SSH to `.35`) |
+| P0 | Verified `.13` containers | `wherewoof-admin`(:3031), `wherewoof-minio`(:9010), `wherewoof-db`(:5434), Garage(:3900/3902)+portal(:8500) |
+| P0 | Confirmed external exposure | static IP port-forward 80/443 → Caddy `.35`; `where-woof.com`→`192.168.20.13:3020` |
+| P1 | Decision: AWS-only, S3→Glacier DA, ap-southeast-2 (Sydney), IAM least-privilege | Awaiting AWS account signup to proceed |
+| — | Created per-phase plan notes (P0, P1, P2, P3, P5) + this log | Obsidian `220 Web Host Migration/` |
+
+## Pending next action
+- **User:** finish AWS account signup (https://aws.amazon.com) → root MFA + billing + region `ap-southeast-2`.
+- **Then:** build Phase 1 on `.13` (IAM user `backup-offsite`, bucket `sam-offsite-backup`, lifecycle, rclone/Borg→S3, first seed, test restore).
+
+---
+
+*Linked from [[Migration Plan — InMotion to Local + AWS Offsite]].*