Repository navigation
github-backup: estate mirror system (scripts, units, Worker, runbook) - #3214
Conversation
…rker receiver, runbook Canonical home for Drew's GitHub backup system (Tier C + nixpkgs pool, decided 2026-10-31): config-driven owners/tier rules/exclusions in config.json; plan builder + resumable parallel mirror clone; daily fetch, weekly reconciliation sweep, webhook queue drainer; dedicated GitHub App (hatch-repo-backup) tooling with Bitwarden-by-name secrets; Cloudflare Worker webhook receiver (source + wrangler config); systemd user units; README + copy-paste RUNBOOK (install, add-org, App install, upgrade, fresh-laptop, restore, DR). Plan builder verified against the 2026-10-31 inventory: 818 mirrors, 7 ruling exclusions, 37 zero-commit skips, 35 alternates-linked family members, nixpkgs members anchored on NixOS/nixpkgs.
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
|
You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard. |
|
Warning Review limit reachedYou've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository. Next included review available in 7 minutes. View limit details
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. |
Implements the GitHub backup system decided 2026-10-31 (Tier C scope + nixpkgs family pool; dedicated GitHub App; webhooks via a Cloudflare Worker; weekly reconciliation sweep as correctness floor).
Home:
infra/github-backup/— config.json (owners/tier rules/exclusions/gaps — adding an org is a config edit), bin/ (plan builder, clone_all, fetch_mirrors, reconcile, manifest, drain_queue, app_setup), systemd/ (laptop user units + installer), worker/ (webhook receiver source + wrangler.toml), README.md, docs/RUNBOOK.md (copy-paste: install, App creation/install per org, add-org, upgrade, fresh-laptop reinstall, restore, disaster recovery).Verification: plan builder run against the measured 863-repo inventory reproduces the production plan exactly — 818 mirrors, 7 exclusions, 37 zero-commit skips, 35 alternates family members; all Python files compile; Worker JS syntax-checked. The initial clone fleet is running on the laptop from this same logic; units/App/Worker deployment follows in the rollout (tracked on the system issue).
Need help on this PR? Tag
@codesmith-botwith what you need.