Adam Moussa
|
da79e6c0f8
|
Add .env to .gitignore
Required by org CI conventions check.
|
2026-05-15 17:38:31 -04:00 |
|
Adam Moussa
|
0d3f9ad5a3
|
Commit cdk.context.json for CI synth without AWS credentials
Vpc.fromLookup requires cached context to synthesize without
AWS credentials. Required for CI which runs cdk synth without
an OIDC role.
|
2026-05-13 18:15:37 -04:00 |
|
Adam Moussa
|
d57aea19f3
|
Add 3-2-1 backup strategy with cross-region replication and GCS offsite
Implements a fully compliant 3-2-1 backup architecture:
- Copy 1 (live): Harden existing EBS snapshots to 30-day retention
- Copy 2 (near-site): S3 cross-region replication to us-west-2 with
Object Lock (governance 90d) and versioning
- Copy 3 (offsite): GCS bucket in dedicated seahaven-backups GCP project
with 2-year irreversible retention lock
Also adds a verification Lambda that checks all 3 locations daily and
runs monthly restore tests with SQLite integrity checks.
|
2026-05-13 18:02:50 -04:00 |
|
Adam Moussa
|
a500d69716
|
Add Forgejo CDK stack
EC2 (t4g.small, arm64) in private subnet with VPN-only access,
DLM nightly snapshots, and Route53 DNS at forgejo.seahaven.com.
|
2026-05-11 17:52:37 -04:00 |
|