From b7627a3a31a87802c5e38852f896df92aae7a216 Mon Sep 17 00:00:00 2001 From: SIAX Agent Date: Sat, 7 Nov 2026 17:37:33 +0100 Subject: [PATCH] docs(runbook): legacy-instansaudit server5 (0pt + L0RE) och disposition MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 0pt legacy: 32 kanoniska facts exporterade och återinförda via API (replay duplicates=32), dump till server11, api/web stoppade med restart=no, pg kvar för forensik. L0RE-orphan refererad till PR #485. Ingen databas/volymer raderade. --- docs/runbook/legacy-instances-20261107.md | 47 +++++++++++++++++++++++ 1 file changed, 47 insertions(+) create mode 100644 docs/runbook/legacy-instances-20261107.md diff --git a/docs/runbook/legacy-instances-20261107.md b/docs/runbook/legacy-instances-20261107.md new file mode 100644 index 0000000..7358857 --- /dev/null +++ b/docs/runbook/legacy-instances-20261107.md @@ -0,0 +1,47 @@ +# Legacy instance audit — 0pt (server5) and L0RE (server5) — 2026-11-07 + +Canonical runtimes: **0pt on server6** (Coolify app `shxd6lepxuxfsjsp0ath3z1g`, +`0pt.app`) and **L0RE on server9** (`l0re.siax.io`). This document records the +older instances on server5 and their disposition. It is not production +documentation for either product. + +## 1. 0pt legacy (server5) + +| Item | Value | +|---|---| +| Containers | `0pt-api` (`0pt-api:c46ebbf`, created 2026-11-05), `0pt-web` (`:18080`) | +| Database | `0pt-pg`, user/db `opt`, 11 MB | +| Exposure | `0pt-web` only on `100.124.7.55:18080`; no DNS record, no reverse proxy | +| Consumers | none found (`/etc/siax`, `/opt/siax`, site0 and L0RE deploy configs) | +| Unique data | 32 canonical facts (30 GLEIF web observations + `body_type` YDL405 + `passmark.find_prime_numbers.v10`) | + +**Data reconciliation:** all 32 facts were exported and re-imported through the +canonical API (`POST /api/0pt/canonical/facts`) into the server6 deployment. +Replay returned `duplicates: 32`, so the import is idempotent. Production now +holds 34 facts (32 migrated + 2 verification observations) and 4 entities. + +**Backup:** `server5:/var/backups/0pt-legacy/opt_legacy_20261107.dump.zst` +(custom format, 32 KB) + offsite `server11:/home/backup/0pt/`. + +**Action taken:** `docker update --restart=no` + `docker stop` for `0pt-api` and +`0pt-web`. `0pt-pg` left running for forensics/rollback. `0pt.app` verified 200 +after the stop (served by server6). + +**Full removal (requires owner decision):** snapshot/destroy `0pt-pg` volume +after the retention window, remove the legacy compose project, revoke the old +`INTERNAL_TOKEN` if it was ever stored on server5. + +## 2. L0RE orphan (server5) + +Documented separately in `admin/l0re` PR #485 +(`docs/runbook/l0re-orphan-decommission-20261107.md`): API stopped with +`restart=no`, dump + restore proof (8 propositions/62 assertions), no unique +legitimate data (pilot facts already re-projected to production). `l0re-pg` and +`l0re-opensearch` remain for forensics. + +## 3. Single-runtime rule + +One primary runtime per logical service. A container image of a product running +outside its registered Coolify app is a finding, not a fallback. Both server5 +instances were reachable only from the host, which is why the split survived +until this audit.