Skip to content

fix(postgres): preserve Jotwink isolation and verify encrypted restores - #6

Merged
kaanyagci merged 4 commits into
mainfrom
codex/jotwink-databases
Oct 15, 2026
Merged

kaanyagci merged 4 commits into
mainfrom
codex/jotwink-databases

Conversation

@kaanyagci

@kaanyagci kaanyagci commented Aug 13, 2026 •

Copy link
Copy Markdown
Member

Changes

  • Reconcile the Jotwink database and encrypted backup scripts with the current shared production configuration.
  • Preserve existing login credentials and reject unsafe bootstrap/restore targets.
  • Make the host backup profile optional; use the pinned compatible image and UID 999.
  • Preserve unrelated role-specific HBA denial rules while rejecting broad access rules.

Native GitHub stack

Native stack #56; prerequisite for #7.

Validation

Real disposable PostgreSQL TLS connections, CMS-encrypted backup and restoration of both databases passed. Nonempty target and TLS downgrade rejection, HBA safety, encryption and configuration checks passed. Existing unverified historical signatures were re-signed with identical file trees; remote checks rerun on the new SHA.

Release status

Reviewed and repaired as part of the shared-service PR sweep. This PR remains unmerged pending GitHub repository gates. No branch-protection bypass or production deployment is included in this review.

@kaanyagci
kaanyagci added this pull request to stack #56 October 8, 2026 06:39
@kaanyagci kaanyagci changed the title Provision Jotwink databases and encrypted backups fix(postgres): preserve Jotwink isolation and verify encrypted restores Oct 8, 2026
@kaanyagci
kaanyagci marked this pull request as ready for review October 13, 2026 21:08
@kaanyagci
kaanyagci force-pushed the codex/jotwink-databases branch from 9ed02b9 to 65bda94 Compare October 13, 2026 21:28
@kaanyagci
kaanyagci merged commit 925883a into main Oct 15, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant