Backups & disaster recovery

What gets backed up

HAProxy backup (backup.haproxy_scopes / job backup_haproxy) captures:

• /etc/haproxy/haproxy.cfg and conf.d/*.cfg
• /etc/haproxy/certs/*
• Let’s Encrypt material under /etc/letsencrypt/
• Paths referenced by ssl crt in config under /etc/
• Optional UFW rules (backup.ufw) — separate job

Storage: Per member S3.

Path pattern:

Restore flows

Same member: Restore Backups tab → pick snapshot → scoped restore → agent validates with haproxy -c → reload.

Cross-member (DR tab): Restore another member’s snapshot to a target VM — typically after an outage or a bad config push.

Fresh VM rebuild:

1. Enrol new/replacement member
2. Optional: Install HAProxy
3. Restore snapshot
4. Make active when ready

Standby provisioning

Provision standby from backup clones, HAProxy config from a backup onto a standby host — faster than manual copy for DR drills.