Sergei Vasilev
52 lines
1.6 KiB
Markdown
52 lines
1.6 KiB
Markdown
# IQON remote backup retention check
|
|
|
|
Purpose: record the read-only remote backup directory check after creating the encrypted local DB archive.
|
|
|
|
Created: 2026-05-20
|
|
Updated: 2026-05-20
|
|
|
|
## Status
|
|
|
|
`VERIFIED`: live site health still passes and the remote backup directory contains one IQON DB archive.
|
|
|
|
## Live health
|
|
|
|
1. `scripts/iqon-phase1-verify.sh https://iqon.com` passed.
|
|
2. `https://www.iqon.com/` still contains new-design markers: `theme-color`, `topbar`, `hero-cloud`.
|
|
3. Git worktree was clean before this report was created.
|
|
|
|
## Remote backup directory
|
|
|
|
Read-only listing showed one file:
|
|
|
|
```text
|
|
/var/www/u0012812/data/backups/iqon-u0012812_iqon-20260520-231601.sql.gz
|
|
```
|
|
|
|
Observed size: approximately `469K`.
|
|
|
|
## Interpretation
|
|
|
|
1. Failed tiny dump attempts are no longer present in the matched `iqon-*.sql.gz` listing.
|
|
2. A valid plaintext DB archive remains on the remote shared hosting account.
|
|
3. A durable encrypted local artifact already exists at `/Users/svmac/.codex/memories/secure-artifacts/iqon/iqon-u0012812_iqon-20260520-231601.sql.gz.enc`.
|
|
4. The encryption key is stored in Vaultwarden item `IQON DB archive encryption key - 20260520-231601`.
|
|
|
|
## Decision needed
|
|
|
|
Deleting the remote plaintext DB archive is destructive. Do it only after explicit approval.
|
|
|
|
Recommended if minimizing secret exposure on shared hosting:
|
|
|
|
```bash
|
|
rm /var/www/u0012812/data/backups/iqon-u0012812_iqon-20260520-231601.sql.gz
|
|
```
|
|
|
|
Expected post-delete verification:
|
|
|
|
```bash
|
|
ls -lh ~/backups/iqon-*.sql.gz 2>/dev/null || true
|
|
```
|
|
|
|
Expected signal: no plaintext IQON DB archive remains on the remote host.
|