0xMiden / 0xMiden/note-transport-service

No backup/restore story for the note database

未關閉
#125 0 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
enhancement production-readiness
主要語言
Rust
星號
3
分支
10
平均合併
2 小時 23 分鐘
30 天內合併 PR
4

描述

Severity: high (for the stated production goal).

### Summary

There is no backup mechanism anywhere: no `VACUUM INTO`/`.backup`, no litestream/WAL-shipping sidecar in `bin/node/docker/docker-compose.yml` (only telemetry services), nothing in the `Makefile` (only `docker volume create node-db`), nothing in the docs.

### Impact

For private notes, this DB is the only copy of `NoteDetails` before consumption (per #101's own framing). A lost volume is unrecoverable, fund-relevant data loss — and per the fail-open issue (#124) the service silently restarts empty rather than failing.

### Recommendation

- Minimum viable: periodic `VACUUM INTO '/backup/…'` (safe online under WAL) from the maintenance loop or a cron sidecar, plus documented restore steps.
- Better: litestream or WAL-shipping.
- Note the overlap with #111 — a Postgres backend inherits a mature backup ecosystem.

Related: #111, #112.

---
Part of #114.

貢獻指南

開啟貢獻指南

評估

這個 Issue 還沒有評估資料。

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。