3 commits

Author	SHA1	Message	Date
Adam Moussa	0d3f9ad5a3	Commit cdk.context.json for CI synth without AWS credentials ... Vpc.fromLookup requires cached context to synthesize without AWS credentials. Required for CI which runs cdk synth without an OIDC role.	2026-05-13 18:15:37 -04:00
Adam Moussa	d57aea19f3	Add 3-2-1 backup strategy with cross-region replication and GCS offsite ... Implements a fully compliant 3-2-1 backup architecture: - Copy 1 (live): Harden existing EBS snapshots to 30-day retention - Copy 2 (near-site): S3 cross-region replication to us-west-2 with Object Lock (governance 90d) and versioning - Copy 3 (offsite): GCS bucket in dedicated seahaven-backups GCP project with 2-year irreversible retention lock Also adds a verification Lambda that checks all 3 locations daily and runs monthly restore tests with SQLite integrity checks.	2026-05-13 18:02:50 -04:00
Adam Moussa	a500d69716	Add Forgejo CDK stack ... EC2 (t4g.small, arm64) in private subnet with VPN-only access, DLM nightly snapshots, and Route53 DNS at forgejo.seahaven.com.	2026-05-11 17:52:37 -04:00