# Restore Runbook

## VPS Restore

1. Provision host and SSH access.
2. Ensure `ops.bundle` exists at `/srv/backups/ops/latest/ops.bundle` (or set `OPS_BUNDLE_PATH`).
3. Run `bootstrap/vps.sh`.
4. Confirm VPN up and Caddy healthy.
5. Validate DNS + TLS endpoints.

## Homelab Restore

1. Provision host and SSH access.
2. Ensure `ops.bundle` exists at `/srv/backups/ops/latest/ops.bundle` (or set `OPS_BUNDLE_PATH`).
3. Run `bootstrap/homelab.sh`.
4. Restore data under `/srv/data/*` and `/srv/backups/*` as needed.
5. Start stacks with `docker compose up -d` per stack.
6. Run health checks and verify service endpoints.

## Data Priorities

- Gitea app data + DB dump
- Repo mirror exports
- Proxy config and certificates
- Encrypted secret source files