benjamin.baker 19071ec6c6 Add opt-in backup overlay with third-container restic store ...

Backups are per-site and not part of the base stack, so they ship as a separate compose overlay with an isolated restic REST server the app can only reach through the backup utility (no shell or db creds). The sidecar image trusts the corporate proxy root CA at build time so its Oracle yum, github, and PyPI fetches succeed behind TLS interception; shell scripts are pinned to LF via .gitattributes so the container entrypoints do not die on a CRLF shebang.

2026-09-03 20:06:45 -04:00

7.8 KiB

Raw Blame History

View Raw