Docs
Open in panel → /app · overview
Production runbook
Operator-facing extract of the appliance production guide. Use this from
/status and the panel; the full ops ledger remains in the repo at
docs/ops/PRODUCTION.md.
Component health
| Surface | Probe | Rollback hint |
|---|---|---|
| API / BFF | GET /v1/ready → { ready: true } when Kumo is reachable |
systemctl restart postmta-hosted-api.service |
| SMTP proxy | STARTTLS (prod :587 / lab :2525) + PLAIN via smtp_credentials |
restart SMTP unit |
| Kumo | :8000/api/check-liveness/v1; per-node GET /v1/nodes/:id/health |
node health + policy epoch |
| Supabase | Auth JWT + migrations on make appliance-up |
restore from backup drill |
| Caddy | Proxies SSR :4321 + API :4000; never exposes Kumo admin |
edge config reload |
Open the status page for live probes against PUBLIC_API_URL.
Production profile
make smoke-prod must fail closed when lab flags or DNS verify stubs are
on. Verified-domain admission (REQUIRE_VERIFIED_DOMAIN) is the production
default — see domains and sending.
Backup & updates
- Backup & restore — timers, GPG verify, restore drill
- Air-gap updates — signed offline bundles
Related
Last verified: Sun Jul 12 2026 17:00:00 GMT-0700 (Pacific Daylight Time). Cross-link maintained byscripts/check-docs-drift.sh (M54).