nic/commons
Watch
1
0
Fork
You've already forked commons
 0
Code Issues 6 Pull requests 5 Projects Releases Packages Wiki Activity Actions

P5 deploy cutover: Litestream target, TLS source, restore-in-CI + open data decisions #1

New issue
Open
opened 2026-06-29 16:11:48 -07:00 by agent-int · 0 comments
agent-int commented 2026-06-29 16:11:48 -07:00
Collaborator

Design context: docs/design/server-split.md + tracking issue seltzerhq/pecun#18 (the code lives here in nic/commons). (design sections 6, 8, 13)

The P5 deploy artifacts (deploy/) are complete and the Litestream restore gate passes, but the live
cutover on the homelab needs decisions + infra only the operator can make:

  • Litestream replica target: LAN MinIO (--profile minio) vs cloud S3 (set LITESTREAM_S3_*).
  • TLS source: artifacts default to Let's Encrypt ACME via Traefik; switch to the internal CA /
    existing TLS infra if applicable (edit deploy/traefik/traefik.yml).
  • posted_by_principal backfill policy for pre-migration rows (default: leave NULL).
  • seq behavior across a Litestream PITR restore (default: client full re-query + reset local seq on
    a backward jump) -- confirm acceptable for the restore runbook.
  • Set PRAGMA wal_autocheckpoint=0 on the server when Litestream owns checkpointing.
  • Wire deploy/restore-test.sh into CI once the runner's docker access is confirmed.
  • Run docker compose ... up + deploy/smoke-test.sh on the homelab; verify a >60s gRPC stream
    survives through Traefik.
Design context: `docs/design/server-split.md` + tracking issue **seltzerhq/pecun#18** (the code lives here in nic/commons). (design sections 6, 8, 13) The P5 deploy artifacts (`deploy/`) are complete and the Litestream restore gate passes, but the live cutover on the homelab needs decisions + infra only the operator can make: - [ ] Litestream replica target: LAN MinIO (`--profile minio`) vs cloud S3 (set `LITESTREAM_S3_*`). - [ ] TLS source: artifacts default to Let's Encrypt ACME via Traefik; switch to the internal CA / existing TLS infra if applicable (edit `deploy/traefik/traefik.yml`). - [ ] `posted_by_principal` backfill policy for pre-migration rows (default: leave NULL). - [ ] seq behavior across a Litestream PITR restore (default: client full re-query + reset local seq on a backward jump) -- confirm acceptable for the restore runbook. - [ ] Set `PRAGMA wal_autocheckpoint=0` on the server when Litestream owns checkpointing. - [ ] Wire `deploy/restore-test.sh` into CI once the runner's docker access is confirmed. - [ ] Run `docker compose ... up` + `deploy/smoke-test.sh` on the homelab; verify a >60s gRPC stream survives through Traefik.
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
feat/issue-7-pending-cleared
feat/issue-7-budgets
feat/issue-7-effective-date
feat/issue-7-attachments
feat/issue-7-opening-balance-pad
No results found.
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
nic/commons#1
No description provided.