Operator Guide

MP-OPT Management Console

Use one guarded SSH interface for deployment, configuration, recovery, logs, and high availability instead of memorising Compose and database commands.

Open the console

VPS SSH

ssh deploy@VPS_ADDRESS
mp-opt

Run it only in an interactive SSH session. The launcher resolves the current repository, opens a full-screen terminal UI and keeps nested operations inside the main menu.

Menu areas

Area	Use it for
System overview	Health, versions, disk space and recovery readiness.
Deploy and services	Pull/deploy, rebuild, start, stop, restart and service status.
Configuration	SMTP, runtime limits, recovery recipient, database/application/VAPID rotation and domain changes.
Snapshots and recovery	Create, verify, export, import, restore and delete encrypted recovery points.
Root administrator recovery	Reset root authentication without deleting application data.
Database	Statistics, encrypted database snapshots, restore and guarded complete wipe.
High availability	Replication, peer state, TLS, switchover, automatic failover and certification readiness.
Logs	Recent, time-bounded or live backend, database and Caddy logs.
Maintenance and diagnostics	Validation, redacted diagnostics, audit-chain checks, recovery evidence and safe cache cleanup.

Safe operating patterns

Use View redacted configuration instead of printing .env.
Use the Logs menu; live logs stop cleanly and temporary viewer files are removed.
Use Validate Compose, Caddy, health and permissions after host changes.
Let destructive actions create and deep-verify their rollback snapshot before confirming.
In HA mode, disable automatic failover before restore, wipe, key consolidation or other long maintenance.

Updates in an HA pair

Disable automatic failover from the current holder.
Deploy the non-holder first.
Deploy the holder.
Require matching Git commits, healthy services and a fresh successful replication.
Perform a planned switchover test before re-enabling automatic failover.