Skip to main content

​
Backup & Restore

The runtime datastore is PostgreSQL. Backup tooling does not alter checkpoints; restore tooling can change application state and must be treated as a maintenance operation.

​
Read-only database backup

From the repository root:
Optional gzip:
Default output is under var/backups/postgres/.

​
Guarded restore

The restore script requires explicit confirmation and takes a pre-restore backup. It uses pg_restore --no-owner --no-acl without --clean.

​
Release-stack backup

For Compose deployments, scripts/release/backup-before-upgrade.sh and scripts/release/restore.sh provide a second operator path. Release restore requires RESTORE_CONFIRM=YES_I_UNDERSTAND plus interactive database-name confirmation.

​
What database backup does not include

Back up .env, external secret-manager values, TLS material, and other host configuration through secure configuration management. Do not place secrets in Git.
Last modified on September 10, 2026