feat(backup): executable PostgreSQL point-in-time recovery, and the spec rename around it - #80

Merged

vishr merged 30 commits into

mainfrom

feat/postgres-protection

Aug 20, 2026

Commits on Aug 19, 2026

feat(backup): make PostgreSQL point-in-time recovery executable

vishr
and
claude
committed
430026e
refactor(backup): run PostgreSQL protection on wal-g, not pgBackRest

vishr
and
claude
committed
9db9f2c
fix(backup): install protection credentials, and stop minio claiming it is protected

vishr
and
claude
committed
5f62361
fix(doctor): stop reporting protected services as unprotected

vishr
and
claude
committed
c43dc42
feat(backup): recover to a point in time, and prove it without touching anything

vishr
and
claude
committed
23f7edd
feat(backup): install the schedules the policy declares

vishr
and
claude
committed
0c5aeae
feat(backup): disable protection without touching the backups

vishr
and
claude
committed
e29d570
fix(backup): stop a deploy from deleting every scheduled backup

vishr
and
claude
committed
a2f5d66
fix(backup): keep the recovery window the policy promises

vishr
and
claude
committed
36b096c
spec!: rename the backup surface and group the checks

vishr
and
claude
committed
13f7c10
docs: say that backups exist, and write the guide for them

vishr
and
claude
committed
3f67b9a

Commits on Aug 20, 2026

refactor(backup): delete the agent-on-target scheduling that systemd replaced

vishr
and
claude
committed
972419c
refactor(backup): delete the rest of the unreachable protection model

vishr
and
claude
committed
22d0995
spec!: abbreviate the maximum_/minimum_ prefixes

vishr
and
claude
committed
8df6732
chore: remove the symbols the protection deletions orphaned

vishr
and
claude
committed
e8362c4
fix(backup): address the code review on #80

vishr
and
claude
committed
cb9483e
fix(backup): address the second code review on #80

vishr
and
claude
committed
6519693
fix(backup): do not re-pull an image the host already has pinned

vishr
and
claude
committed
f184b1d
refactor: carry the schema rename into code, filenames, and docs

vishr
and
claude
committed
82585e7
fix(backup): three defects a live PostgreSQL recovery found

vishr
and
claude
committed
6f6c11e
refactor: delete the parts of onebox that described work instead of doing it

vishr
and
claude
committed
5b414a3
fix: wire the disable-pending refusal, and delete what the cut orphaned

vishr
and
claude
committed
6e72c2f
perf(registry): stop asking the registry for what the host already has

vishr
and
claude
committed
38b8c66
fix(compose): the declared pull policy has to reach Compose, not just onebox

Vishal Rana
and
claude
committed
17e311d
fix(backup): make disable-pending cover the work it names

vishr
and
claude
committed
a06ce67
fix(backup): recover to the point that was asked for, not to the newest one

vishr
and
claude
committed
ad7e8d5
fix(backup): the verify check reported green over a broken WAL chain

vishr
and
claude
committed
00f0c1e
fix(backup): refuse a policy no driver can establish, and report the promise beside the facts

vishr
and
claude
committed
2a2087a
fix(backup): the scheduled archive check could not fail either

vishr
and
claude
committed
666e405
refactor(journal): delete the backup journal model nothing writes

vishr
and
claude
committed
b98f627

Navigation Menu

Uh oh!

feat(backup): executable PostgreSQL point-in-time recovery, and the spec rename around it - #80

feat(backup): executable PostgreSQL point-in-time recovery, and the spec rename around it#80
vishr merged 30 commits into
mainfrom
feat/postgres-protection

Commits on Aug 19, 2026

feat(backup): make PostgreSQL point-in-time recovery executable

refactor(backup): run PostgreSQL protection on wal-g, not pgBackRest

fix(backup): install protection credentials, and stop minio claiming it is protected

fix(doctor): stop reporting protected services as unprotected

feat(backup): recover to a point in time, and prove it without touching anything

feat(backup): install the schedules the policy declares

feat(backup): disable protection without touching the backups

fix(backup): stop a deploy from deleting every scheduled backup

fix(backup): keep the recovery window the policy promises

spec!: rename the backup surface and group the checks

docs: say that backups exist, and write the guide for them

Commits on Aug 20, 2026

refactor(backup): delete the agent-on-target scheduling that systemd replaced

refactor(backup): delete the rest of the unreachable protection model

spec!: abbreviate the maximum_/minimum_ prefixes

chore: remove the symbols the protection deletions orphaned

fix(backup): address the code review on #80

fix(backup): address the second code review on #80

fix(backup): do not re-pull an image the host already has pinned

refactor: carry the schema rename into code, filenames, and docs

fix(backup): three defects a live PostgreSQL recovery found

refactor: delete the parts of onebox that described work instead of doing it

fix: wire the disable-pending refusal, and delete what the cut orphaned

perf(registry): stop asking the registry for what the host already has

fix(compose): the declared pull policy has to reach Compose, not just onebox

fix(backup): make disable-pending cover the work it names

fix(backup): recover to the point that was asked for, not to the newest one

fix(backup): the verify check reported green over a broken WAL chain

fix(backup): refuse a policy no driver can establish, and report the promise beside the facts

fix(backup): the scheduled archive check could not fail either

refactor(journal): delete the backup journal model nothing writes