Operations¶
Runbooks for running VegaDūta. Deployment-specific detail stays with the deployment: Compose and Helm.
| Runbook | Where |
|---|---|
| Backup and restore | Compose, Helm, rollback and recovery (handbook) |
| Upgrade | Compose, Helm |
Run locally, ports, kubectl/k9s |
local-stack-guide.md |
| Host behind a Cloudflare Tunnel (no open ports) | tunnel-hosting.md |
Rotate APP_ENCRYPTION_KEY |
key-rotation.md |
| Observability, alerts | handbook; alert rules in deploy/prometheus/ |
| Secrets model | handbook |
| CLI: doctor, logs, secrets, status, backup, restore, upgrade | scripts/vegaduta doctor, logs, secrets, status, backup, restore, upgrade (deploy/README.md) |
| First platform admin | scripts/vegaduta make-admin USERNAME_OR_EMAIL |
| Local model catalog (Ollama) | scripts/vegaduta models list, models pull TAG, models rm TAG; catalog in deploy/models/catalog.txt. scripts/vegaduta.ps1 has only models pull TAG (what the Setup app runs; list, rm and seed-demo are bash-only: use WSL2) |
| Fictional demo data for a pilot | scripts/vegaduta seed-demo [--tenant NAME] [--remove] [--yes]; see pilots |
| Using the console (screens, permissions) | Console guide |
Compatibility policy: a release may add Flyway migrations and never edits
released ones (docs/engineering/FLYWAY-VERSIONING.md); upgrade one minor at a
time unless the release notes say otherwise, and read CHANGELOG.md for
### Changed entries that need an operator action.