Backups & disaster recovery

What gets backed up
HAProxy backup job captures:
/etc/haproxy/haproxy.cfg and 
conf.d/*.cfg
/etc/haproxy/certs/*
Let’s Encrypt material under 
/etc/letsencrypt/
Paths referenced by 
ssl crt in config under 
/etc/
Optional UFW rules (
backup.ufw) — separate job
Storage: Per member S3.
Path pattern:
/{userId}/sites/{siteId}/snapshots/{snapshotId}/
Restore flows
Same member: Restore Backups tab → pick snapshot → scoped restore → agent validates with 
haproxy -c → reload.
Cross-member (DR tab): Restore another member’s snapshot to a target VM — typically after an outage or a bad config push.
Fresh VM rebuild:
Enrol new/replacement member
Optional: Install HAProxy
Restore snapshot
Make active when ready
Standby provisioning
Provision standby from backup clones, HAProxy config from a backup onto a standby host — faster than manual copy for DR drills.