4 ms·
Seems like all* you need is to have production be able to push a new backup with a cool off period of a non-negligible, not-too-long period. *Please point out
by newnamenewface 5y ago
Seems like all* you need is to have production be able to push a new backup with a cool off period of a non-negligible, not-too-long period.
*Please point out how wrong this is.
- koolba 5y agoProduction can push as many backups as it wants, it shouldn’t be able to overwrite the previous backups. Deletion and expiry has to happen separately. There’s no reason for it to even be able to list the backups and that restriction combined with a randomized backup ID (in addition to any date/time tagging) limits the ability to corrupt the backups.
- blueblob 5y agoSeems to me it would be better to have the backup pull from production so the scripts cannot be reverse engineered. Maybe it's just 6 in one and a half dozen in the other though.