From 12a0676d629178c9030707eee78376b7a5c29015 Mon Sep 17 00:00:00 2001 From: Inferencebot Date: Sun, 1 Nov 2026 16:38:54 +0000 Subject: [PATCH] =?UTF-8?q?README:=20the=20runbooks=20are=20public=20?= =?UTF-8?q?=E2=80=94=20remove=20the=20'Private'=20line=20and=20state=20the?= =?UTF-8?q?=20review=20intent?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit They were published to co-op/runbooks for member review, so the README's own 'Private: these contain...' line was both wrong and the first thing a reader saw. Also records the DNS sheet's wildcard caveat up front, and says explicitly that this repository is the source (no private copy). --- README.md | 30 +++++++++++++++++++++++++++--- 1 file changed, 27 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 4305880..220fa9a 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,30 @@ # Runbooks -Operational runbooks for the co-op's infrastructure. Private: these contain -topology, addresses, and procedure detail that should not be public. +Operational runbooks for the co-op's infrastructure, published so **members can read them and +raise problems**. That review is the point: these plans are safer when more eyes have been over +them before anything irreversible happens. -- [Cloudron server migration — Hostinger → Infomaniak](cloudron-server-migration.md) +Comment, or open an issue. There is no separate private copy — this repository is the source. + +## Contents + +- **[cloudron-server-migration.md](cloudron-server-migration.md)** — the plan for moving Cloudron to + the new server: pre-flight, the cutover window, what must be in hand first, and how to verify a + restore. The one to read if you want to find problems. +- **[dns-change-sheet.md](dns-change-sheet.md)** — the record-by-record cutover sheet. +- **[migration-before-state.json](migration-before-state.json)** — the captured pre-migration state + that the restore checker compares against. +- **[provider-pricing/](provider-pricing/)** — what our model providers charge, and when it changed. + +## Read the DNS sheet with this in mind + +Its record counts **cannot be trusted until reconciled against the registrar's panel.** The zone is +wildcarded, so *any* hostname resolves — a name that answers proves nothing about whether a record +exists. At least two listed records turned out not to exist, and the real record inventory is only +visible in the registrar's own list. + +## No secrets here + +Audited 2026-11-01, including the full commit history: no credentials, tokens, keys, member emails +or account identifiers. Where a runbook needs a credential to exist (a backup passphrase, an S3 +key), it records **where the credential is held**, never the credential.