generated from john/python-template
@@ -25,7 +25,8 @@ This runbook is the operational checklist for releasing and monitoring the trans
|
||||
2. Validate service startup:
|
||||
- `/healthz` responds `200`
|
||||
- if `RUN_EMBEDDED_WORKER=true`, `worker.state` is `running`
|
||||
- if `RUN_EMBEDDED_WORKER=false`, validate `worker` container is healthy/running in Compose
|
||||
- if `RUN_EMBEDDED_WORKER=false`, validate `worker` container is running in Compose
|
||||
(worker healthcheck is intentionally disabled because it does not expose `/healthz`)
|
||||
- validate `cloudflared` logs show active tunnel routes and no ingress errors
|
||||
3. Execute one smoke workflow:
|
||||
- create a document/job with at least one source
|
||||
@@ -98,6 +99,8 @@ This runbook is the operational checklist for releasing and monitoring the trans
|
||||
2. Confirm `deploy/cloudflared/config.yml` hostname mappings are correct.
|
||||
3. Confirm `CLOUDFLARE_TUNNEL_TOKEN` in `.env.production` matches the tunnel configured in Cloudflare.
|
||||
4. Confirm Cloudflare Access app policy includes the intended identity/group for that hostname.
|
||||
5. If logs show SRV/DNS failures via `127.0.0.11`, use the compose-defined resolver override
|
||||
(`dns: 1.1.1.1, 1.0.0.1`) and ensure outbound TCP 443 is allowed.
|
||||
|
||||
### Backup or restore failure
|
||||
|
||||
|
||||
Reference in New Issue
Block a user