Files

T

vh b95802efa4 docs(backup): hourly off-box ~/development backup to nh3-nas (runbook + script)

Adds the rsync --link-dest hourly snapshot job (nh3-dev:~/development ->
nh3-nas, 48-snapshot retention, secrets/build-dirs excluded) that closes the
no-off-box-backup gap exposed by the 2026-07-12 working-dir clobber. Script
mirrors the live ~/.config/dev-backup/dev-backup.sh; runbook covers restore.

2026-07-12 01:40:43 -07:00

2.7 KiB

Raw Blame History

nh3-dev `~/development` — hourly off-box backup

Why this exists: nh3-dev is the dev box where agents do uncommitted work under ~/development/<project>/. That tree had no off-box backup, so a destructive mistake (a stray rm -rf on a working dir on 2026-07-12) had no safety net. This job closes that gap: an hourly, versioned, off-box snapshot of ~/development.

What it does

Source: nh3-dev:~/development/ (lkraven's working dirs).
Destination (off-box): nh3-nas:/volume1/Backup/nh3-dev-development/<YYYY-MM-DD_HHMM>/ — a timestamped dir per snapshot, over rsync-over-ssh (syncuser).
Versioning: rsync --link-dest against the previous snapshot → unchanged files hardlink (share inodes, ~0 bytes); only changed files consume new space. latest symlink points at the newest snapshot.
Retention: newest 48 hourly snapshots (older pruned each run).
Excludes: heavy reconstructable dirs (node_modules, .venv, venv, __pycache__, .pytest_cache, .mypy_cache, .ruff_cache, .cache, dist, build, .next, target, *.pyc) and secrets (.env, .env.*, *.pem, *.key, id_*, *.sqlite*). .git is kept (local commits/stashes = the uncommitted work that matters). Seed snapshot ≈ 11G; hourly deltas are MB-scale.

Where it lives (on nh3-dev)

Script: ~/.config/dev-backup/dev-backup.sh (mirror committed at scripts/nh3-dev-development-backup.sh).
systemd --user units: ~/.config/systemd/user/dev-backup.{service,timer} (OnCalendar=hourly, Persistent=true, linger on → fires without a login).
Log: ~/.config/dev-backup/dev-backup.log.

systemctl --user list-timers dev-backup.timer   # next run
systemctl --user start dev-backup.service        # run now
tail -f ~/.config/dev-backup/dev-backup.log

Restore

Snapshots are plain dir trees — no special tool needed:

# list snapshots
ssh nh3-nas 'ls -1 /volume1/Backup/nh3-dev-development/'
# restore one file/dir from a chosen snapshot
rsync -a nh3-nas:/volume1/Backup/nh3-dev-development/<STAMP>/<proj>/<path> /tmp/restore/
# or pull a whole project back
rsync -a nh3-nas:/volume1/Backup/nh3-dev-development/latest/<proj>/ ~/development/<proj>/

Notes / future

Not encrypted at rest (plaintext on the trusted internal NAS; secrets are excluded). Upgrade path: migrate to restic once a repo can be created on rest-server-nh3 (currently returns 404 on repo-create — likely append-only) or the Synology sftp subsystem is enabled (currently disabled → restic sftp fails).
Off-box = off the nh3-dev VM (lands on nh3-nas, same NH3 site). Cross-site mirroring of this repo is a separate future layer.

2.7 KiB Raw Blame History

nh3-dev ~/development — hourly off-box backup