Runbooks

Operational procedures — how to do the recurring things safely. This section is a stub; add a page per procedure as they get written.

Candidates worth documenting first:

• Restoring a PostgreSQL backup from R2
• Rotating Cloudflare / Hetzner API tokens
• Adding a new gated service (Pages + CF Access), using this wiki as the worked example
• Responding to a Gatus uptime alert

Where the real detail lives

Deep operational detail belongs in sanctum-codex/docs/. Runbooks here should link out to it rather than duplicate it — one source of truth.