feat(restic fv-ml1): Diariz in the host backup — run-before pg_dump (soft-fail), stage dir, model cache + raw pgdata excluded; first snapshot 776b700b

configs/restic/ana-ml2/profiles.yaml

@@ -15,6 +15,9 @@
 #     the only thing under /tank that upstream cannot hand back — each is
 #     ~300 MB and cost 7-14 h of GPU time, and the ERP line's adapters exist
 #     nowhere else but pfi-gx10's single NVMe and here. ~2.4 GB total.
+#   - ONE DB dump (2026-10-19): the Diariz pilot's postgres, by run-before /etc/restic/diariz-dump.sh;
+#     its raw pgdata volume is excluded. Its recordings (diariz_s3data, SeaweedFS) and DataProtection keys
+#     (diariz_apikeys) ride the volume backup. Before Diariz:
 #   - No DB dumps needed. None of the stacks on this host (llama-swap,
 #     vllm-qwen3, comfyui, kokoro, parakeet, vibevoice, beszel-agent,
 #     dozzle-agent, dockge) store relational data.
@@ -39,6 +42,8 @@ default:
 
   backup:
     verbose: 1
+    run-before:
+      - /etc/restic/diariz-dump.sh   # Diariz pilot pg_dump -> /var/lib/restic/stage/diariz (soft-fail; see the script)
     run-after:
       - date +%s > /var/lib/restic/last-success
     source:
@@ -46,6 +51,7 @@ default:
       - /etc                 # host config (systemd units, chrony, apparmor, ssh, etc.)
       - /root                # root shell history, ssh keys, any ad-hoc scripts
       - /var/lib/docker/volumes  # named volumes (small; models live on /tank, not here)
+      - /var/lib/restic/stage    # dumps written by run-before (diariz.pgdump)
       - /tank/erp-tune/run-*/adapter  # non-regenerable trained LoRA adapters (see header)
     exclude:
       # Docker internals we never want in a backup
@@ -55,6 +61,8 @@ default:
       # from /tank/ are already outside the source list; parakeet is the
       # odd one out using a docker volume). Regenerable from Hugging Face.
       - /var/lib/docker/volumes/parakeet_parakeet_cache
+      - /var/lib/docker/volumes/diariz_workercache   # Diariz model weights (~3.4 GB), regenerable from HF
+      - /var/lib/docker/volumes/diariz_pgdata        # live PG files; the consistent copy is stage/diariz/diariz.pgdump
       # Ephemeral / regenerable junk
       - /opt/docker/compose/*/logs
       - "**/*.log"