do5 → do5.phoebe.lan

Migration and replication tracker. Status values are edited in the repo (do5-migration-data.php) as work progresses. Classification guides revive vs archive vs jump-box follow-up.

Component matrix

Evidence refers to the preserved DigitalOcean host and Atrium backup layout.

Component Role Evidence on do5 Target on do5.phoebe.lan Class Status Notes
do5.cardora.co WordPress site /var/www/cardora.co-do5/html; vhost + DB cardora_do5_202001 vhost + docroot on do5.phoebe.lan Revive Not started Primary Cardora content; large wp-content.
Legacy /wp1 WordPress /var/www/html/wp1; DB wp1 Optional vhost or path on phoebe TBD Not started Classify revive vs archive.
do5.speakez.chat PHP + WebRTC + Ratchet App tree; ws/bin/server.php :8080; js/config.js wss URL Apache + systemd ratchet + WSS proxy Revive Not started Composer install; Xirsys credentials out of repo.
do5-sgvm.storage.cardora.co PHP/static site Dedicated vhost + TLS in backup config vhost on do5.phoebe.lan TBD Not started
do5-ports.getzap.net Static / POC on :8010 Listen 8010 in preserved vhost Optional Apache listen / firewall Archive Not started Low priority unless still referenced.
MariaDB (all DBs) Database engine all-databases.sql.gz; mysql-data-dir-best-effort.tgz MariaDB 10.4-compatible on phoebe Revive Not started Restore users/grants carefully; bind to localhost.
Samba [do5-www] SMB share of /var/www smb.conf in backup Omit by default Archive Not started High risk; only if explicitly required.
Postfix Local mail helper main.cf localhost only postfix or relay via LAN mail policy TBD Not started
TLS certificates HTTPS /etc/letsencrypt in config archive New certs for phoebe hostnames Revive Not started Do not copy secrets to Zap.
Xirsys WebRTC ICE/TURN via API Server.php → global.xirsys.net New credentials in private config Revive Not started Rotate; test from browser after Speakez up.
Public DNS / jump box External access Historical public hostnames on DO du1 or other reverse proxy after LAN validation Jump box Not started Decide per hostname after LAN smoke tests.

Backup artifact → restore use

Paths are under the Atrium preservation tree when mounted (see backup runbook).

Artifact Restore use
filesystem/var_www/ Web roots and uploads
databases/all-databases.sql.gz Logical DB import
databases/mysql-data-dir-best-effort.tgz Emergency reference; prefer SQL dump
config/system-config.tgz Apache/TLS/DB/Samba reference; translate to apache2
filesystem/home-all.tgz User crons/scripts if any
metadata/*.txt Inventory verification
checksums/sha256sums.txt Integrity check

Speakez runtime checklist

Target VM (do5.phoebe.lan)

Planned shape; adjust at provisioning time. See also docs/DO5_PHOEBE_VM.md in the Zap repo.

hostname do5.phoebe.lan
os Ubuntu Server LTS (24.04 default; confirm PHP 7.4 / MariaDB 10.4 install path)
cpu_ram_disk Size to at least 2× preserved /var/www + DB; start modest, expand on phoebe.
network LAN bridge on phoebe; static IP; DNS A/AAAA in AdGuard for do5.phoebe.lan
firewall UFW: 22 from admin nets, 80/443 for web, 8080 optional localhost-only if WS not proxied
packages apache2, mariadb-server, php with required extensions, certbot, composer, ufw
not_installed_by_default samba unless approved

Public exposure / jump box

After LAN validation, decide per hostname whether traffic uses du1 (or another edge) and update DNS and TLS accordingly. The matrix row Public DNS / jump box tracks that decision.