Rockachopa/Timmy-time-dashboard
1
0
Fork 2
Code Issues 7 Pull Requests Actions Packages Projects Releases Wiki Activity

[URGENT] Run Gitea backup before hardening changes #990

New Issue
Closed
opened 2026-03-22 19:12:50 +00:00 by perplexity · 1 comment
perplexity commented 2026-03-22 19:12:50 +00:00
Collaborator
Copy Link

Parent

  • #971 — Urgent: falsework and security and gitea database robustness

Objective

Create a full backup of the Gitea instance before applying any security hardening.

Scope

  • Run the backup script provided in #971 issue body
  • Verify backup includes: database, repositories, custom config, attachments
  • Move backup to off-site storage (not on the same VPS)
  • Verify backup can be restored on a clean instance

Backup Script (from #971)

#!/bin/bash
BACKUP_DIR="/opt/gitea/backups"
TIMESTAMP=$(date +"%Y%m%d_%H%M%S")
GITEA_CONF="/etc/gitea/app.ini"
GITEA_WORK_DIR="/var/lib/gitea"
mkdir -p $BACKUP_DIR
cd $BACKUP_DIR
gitea dump -c $GITEA_CONF
chmod 600 $BACKUP_DIR/*.zip

Acceptance Criteria

  • Backup zip exists and is > 0 bytes
  • Backup is copied to off-site location
  • This is done BEFORE any app.ini changes

Blocked By

Nothing — do this first, before #988 and #989.

## Parent - #971 — Urgent: falsework and security and gitea database robustness ## Objective Create a full backup of the Gitea instance before applying any security hardening. ## Scope - Run the backup script provided in #971 issue body - Verify backup includes: database, repositories, custom config, attachments - Move backup to off-site storage (not on the same VPS) - Verify backup can be restored on a clean instance ## Backup Script (from #971) ```bash #!/bin/bash BACKUP_DIR="/opt/gitea/backups" TIMESTAMP=$(date +"%Y%m%d_%H%M%S") GITEA_CONF="/etc/gitea/app.ini" GITEA_WORK_DIR="/var/lib/gitea" mkdir -p $BACKUP_DIR cd $BACKUP_DIR gitea dump -c $GITEA_CONF chmod 600 $BACKUP_DIR/*.zip ``` ## Acceptance Criteria - [ ] Backup zip exists and is > 0 bytes - [ ] Backup is copied to off-site location - [ ] This is done BEFORE any app.ini changes ## Blocked By Nothing — do this first, before #988 and #989.
claude was assigned by Rockachopa 2026-03-22 21:44:38 +00:00
Rockachopa commented 2026-03-22 22:36:45 +00:00
Owner
Copy Link

PR #996 adds scripts/gitea_backup.sh — a version-controlled backup script.

What I did: Created a robust backup script that runs gitea dump, verifies the output (checks for DB, repos, config, app.ini), locks down permissions, and optionally rsyncs to off-site storage.

What still needs human action: The actual backup must be run on the VPS with sudo access:

ssh root@143.198.27.163
sudo bash scripts/gitea_backup.sh user@backup-host:/backups/gitea/

This is a server-side operation that cannot be performed via the Gitea API. Please run this before proceeding with #988 and #989 (app.ini hardening).

PR #996 adds `scripts/gitea_backup.sh` — a version-controlled backup script. **What I did:** Created a robust backup script that runs `gitea dump`, verifies the output (checks for DB, repos, config, app.ini), locks down permissions, and optionally rsyncs to off-site storage. **What still needs human action:** The actual backup must be run on the VPS with sudo access: ```bash ssh root@143.198.27.163 sudo bash scripts/gitea_backup.sh user@backup-host:/backups/gitea/ ``` This is a server-side operation that cannot be performed via the Gitea API. Please run this **before** proceeding with #988 and #989 (app.ini hardening).
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
222-epic
Workshop: Timmy as Presence (Epic #222)
 actionable
Has a concrete code/config task extracted
 assigned-claude
Issue currently assigned to Claude agent — do not assign to another agent
 assigned-gemini
Issue currently assigned to Gemini agent — do not assign to another agent
 assigned-groq
assigned-kimi
Issue currently assigned to Kimi agent — do not assign to another agent
 assigned-manus
Issue currently assigned to Manus agent — do not assign to another agent
 claude-ready
consolidation
Part of a consolidation epic
 deprioritized
Keep open but not blocking P0 work
 deprioritized
Keep open but not blocking P0 work
 duplicate
Duplicate of another issue
 gemini-review
Auto-generated by Gemini, needs relevance review
 groq-ready
harness
Core product: agent framework, heartbeat, inference, memory
 heartbeat
Harness: Agent heartbeat loop
 inference
Harness: Inference and model routing
 infrastructure
Supporting stage: dashboard, CI/CD, deployment, DNS
 kimi-ready
Scoped and ready for Kimi to pick up
 memory-session
Harness: Memory and session crystallization
 morrowind
Harness: Morrowind embodiment
 needs-design
Needs architectural design before implementation
 needs-extraction
Philosophy with unextracted engineering work
 p0-critical
Priority 0: Must fix now
 p1-important
Priority 1: Important, next sprint
 p2-backlog
Priority 2: Backlog, do when time permits
 philosophy
Philosophical foundation — informs architecture decisions
 rejected-direction
Closed: rejected or superseded direction
 seed:know-purpose
Three Seeds: KNOW YOUR PURPOSE
 seed:serve-real
Three Seeds: SERVE THE REAL
 seed:tell-truth
Three Seeds: TELL THE TRUTH
 sovereignty
Harness: Sovereignty stack
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
Timmy claude grok groq kimi manus perplexity Rockachopa
No Assignees claude
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Rockachopa/Timmy-time-dashboard#990
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?