Infrastructure
Backups
Traefik configuration snapshots and backup gaps.
Backups
ByteBite currently has local Traefik configuration snapshots on BYTEBITE-APP-01. There is no established off-host backup strategy for PostgreSQL or full disaster recovery.
Backup paths verified: 2026-09-08
Traefik snapshots (local)
Two recovery snapshots exist on the APP VM under /root/:
Pre-wildcard backup
/root/bytebite-traefik-backup-20260908-172700/Contains:
- Traefik static configuration
- Original
acme.json - Dokploy dynamic files
- Container inspect output
- Image inspect output
- Docker network inspect output
- Checksums
Post-wildcard backup
/root/bytebite-traefik-post-wildcard-20260908-175333/Contains current working wildcard-era configuration:
traefik.ymlacme.jsonacme-cloudflare.json- Container inspect output
- Checksums
Purpose
These snapshots are configuration rollback points for Traefik/TLS recovery. They are useful when:
- Wildcard TLS breaks after a config change
- Dokploy recreates
dokploy-traefikwithout custom wiring - ACME state needs restoration
Security of ACME material
Backup directories contain acme.json and acme-cloudflare.json with Let's Encrypt account keys and certificates. Treat backups as sensitive:
- Restrict access to root / authorized operators
- Do not copy to unsecured locations
- Do not commit to Git
Limitations
| Limitation | Impact |
|---|---|
| Stored on same VM as production services | Lost if APP VM or storage fails |
| No automated schedule documented | Manual snapshot only |
| No PostgreSQL data | Database loss is not recoverable from these backups |
| No application container state | Only Traefik/infrastructure config |
These are not sufficient for full disaster recovery.
PostgreSQL backups
| Aspect | Status |
|---|---|
| Off-host backup strategy | Not established |
| Dokploy automated backups | Unknown — not verified |
| Point-in-time recovery | Not available |
| Restore procedure | Not documented (gap) |
Future requirements
Before production go-live:
- Automated PostgreSQL backups to off-host storage
- Backup verification / restore drills
- Retention policy
- Monitoring for backup failures
See Known gaps and Disaster recovery.
Related
- Disaster recovery — restore runbooks
- TLS — ACME state files
- Operations — when to take snapshots