docs: migrate Vaultwarden + Forgejo to edge2 LXCs; validate lxc-service-migration runbook

- Vaultwarden -> edge2 CT 102 (SQLite pilot): plan v2 + services/env/ip-allocation, credentials, stale-archive banner
- Forgejo -> edge2 CT 103 (PostgreSQL + non-Caddy git SSH :2222 via iptables DNAT)
- Add & upgrade runbooks/lxc-service-migration.md: SQLite + Postgres data variants, multi-volume tar, iptables-DNAT systemd-unit pattern, gotchas G11-G13
- Both source services left stopped + intact on Contabo as cold rollback

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
Matt Johnson 2026-06-17 17:17:00 +00:00
commit 9fdb6fcac3
6 changed files with 169 additions and 22 deletions

View file

@ -96,11 +96,13 @@ RECON_SMTP_HOST=mail.echo6.co
RECON_SMTP_PORT=587
# Forgejo (forge.echo6.co) - Deployed 2026-02-04
# Location: Contabo VPS (5.189.158.149)
# Migrated to edge2 CT 103 (10.10.10.21 / tailnet 100.64.0.34) on 2026-06-16; SSH via Contabo iptables DNAT (forgejo-ssh-dnat.service).
FORGEJO_URL="https://forge.echo6.co"
FORGEJO_ADMIN_USER="matt"
FORGEJO_ADMIN_PASS="7redditGold"
FORGEJO_SSH_PORT="2222"
FORGEJO_DB_NAME=forgejo
FORGEJO_DB_USER=forgejo
FORGEJO_DB_PASS="forgejo_db_pass_2026"
# Forgejo OAuth2 (Authentik)