Understand the technology
Answers to common recovery questions
Start with the bounded answer, then open the guarded runbook before changing a live installation.
Can a lost snapshot recovery key be recovered?
No. The public age recipient cannot recreate its private identity. Existing snapshots remain encrypted; generate a new key and create a new verified baseline.
Open the runbookDoes automatic failover need my recovery key?
No. Peer replication uses separate node-local identities. The operator recovery key is used only for snapshot verification and restore.
Open the runbookHow much data can an HA failover lose?
Every write after the last complete accepted peer copy may be lost. The configured 5–1440 minute schedule is the target while replication remains healthy.
Open the runbookIs a frozen schedule snapshot a server backup?
No. Schedule History protects one published event schedule. Infrastructure recovery requires an encrypted MP-OPT recovery snapshot stored outside the VPS.
Open the runbookDoes a lost root passkey require wiping the database?
No. MP-OPT can reset only root authentication and issue a replacement bootstrap token while preserving application data.
Open the runbookHow can an operator prove HA works on these providers?
Run the guided destructive test acceptance on a disposable pair, then complete the 72-hour disabled and 24-hour enabled stability phases.
Open the runbook