Backups and Restore
Each stack has its own Postgres backup stream.
Required backup posture
- nightly scheduled backups
- mandatory pre-migration backup before deploy
- off-VM object storage target
- encryption before upload
Restore sequence (high level)
- enable maintenance mode
- stop app containers (keep Postgres available)
- fetch encrypted backup artifact
- decrypt and restore in Postgres
- start app containers
- verify health
- disable maintenance mode
Operational requirement
Do not treat backups as valid until restore is tested in a controlled environment.