Skip to content
cccskills
FreePublished on GitHub

backup-strategy

Estrategia backups Educabot: Postgres (pg_dump, PITR), MySQL, MongoDB, Redis, object storage, retention, restore testing, 3-2-1, RTO/RPO, disaster recovery.

The English summary is being prepared. Showing the original description.

SebastianLuser/claude-code-arcane3 stars(GitHub 3 + cccskills 0)

Run score Not tested

See how to install

Files included (3)

  • SKILL.md4.2 KB
  • references/dr-strategies-and-tests.md2.0 KB
  • references/mysql-mongodb.md2.8 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

backup-strategy — Backups & Disaster Recovery

Regla 0: backup sin restore probado = no tenés backup.

Regla 3-2-1

3 copias, 2 medios distintos (disk + object storage), 1 off-site (otra región).

RTO / RPO

MétricaSignificadoTarget Educabot
RPOCuánto dato podés perder5 min (PITR)
RTOCuánto tardás en volver1h (crítico), 4h (general)

Definir antes de diseñar. Acordar con producto/legal.

Postgres — 3 capas

CapaQuéRetention
Managed snapshots (Cloud SQL)Snapshot diario + PITR7-30d snapshots, 7d WAL
pg_dump lógicoExport off-provider a GCS multi-region30d daily, 3m weekly, 1y monthly
WAL archivingContinuo a GCS (si RPO <1h)7d

Bucket: versioning + object lock + multi-region + IAM write-only para job.

Restore — Testing Mensual

  1. Crear instancia destino (staging-restore)
  2. PITR clone o pg_restore --jobs=4
  3. Smoke test: row counts, últimas transacciones, integridad
  4. Sin restore testing mensual → backup es teatro

MySQL y MongoDB

Mismas tres capas que Postgres: backups del proveedor con PITR (binlogs en MySQL, continuous backup en Atlas), una copia lógica fuera del proveedor y restore mensual. En MongoDB sharded, mongodump no es consistente entre shards.

→ Read references/mysql-mongodb.md for mysqldump --single-transaction, MySQL Shell dump/load, PITR con binlogs, mongodump --oplog, Atlas y clusters sharded

Redis

  • Cache puro: no backup (reconstruible)
  • Sessions/queue: RDB + AOF. Copiar a GCS diariamente. Managed: snapshots automáticos

Object Storage (uploads)

  • Versioning habilitado (soft-delete 30d). Cross-region replication
  • Object Lock (inmutabilidad) contra ransomware/borrado malicioso

Secrets / IaC

  • Secret Manager con versioning + export periódico encriptado
  • Terraform state en bucket con versioning + object lock
  • Infra reconstruible desde git — backup es git

DR Scenarios

EscenarioEstrategiaRTO
Drop accidental tablaPITR T-1min → dump tabla → import15-30min
Corrupción por bugPITR → cutover1h
Región caídaFailover réplica o bootstrap export off-region2-4h
Account comprometidoRebuild desde IaC + backups off-provider24-48h
Ransomware/wipeObject Lock inmutable + rotar creds + restoreVariable

→ Read references/dr-strategies-and-tests.md for backup/restore vs pilot light vs warm standby vs active/active por RTO y costo, y el calendario de pruebas de DR (tabletop, failover de componente, game day)

Monitoring

  • backup_last_success_timestamp → alertar si now() - last > 25h
  • backup_size < 50% promedio 7d → backup vacío/corrupto
  • restore_test_last_success > 45d → recordatorio
  • Alertar si job no corrió (no solo si falló)

Security

  • Encriptación at-rest (KMS) + in-transit (TLS)
  • IAM mínimo privilegio (write-only para job). Cuenta separada para backups
  • Object Lock/WORM para capa crítica. Audit log acceso a dumps
  • Backup con PII → mismas obligaciones GDPR que la DB. Retention alineada

Anti-patterns

  • "Tenemos backups" sin haber restaurado, backup en misma región/cuenta
  • Sin encriptación, retention infinita por inercia, retention muy corta
  • Solo alertar si job falla (no correr ≠ fallar), sin RTO/RPO formales
  • Snapshot del provider como única estrategia

Checklist

  • RTO/RPO documentados y acordados
  • 3-2-1 cumplido
  • Backups automatizados (CronJob)
  • Encriptados at-rest + in-transit
  • Off-provider copy (cross-cloud o cross-region)
  • Restore testing mensual automatizado
  • Runbook DR actualizado y probado en game-day
  • Alertas: last_success staleness
  • Retention alineada con compliance
  • IAM mínimo privilegio + Object Lock

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

Plan, design, and implement A/B tests and experiments with statistical rigor. Covers hypothesis frameworks, sample sizing, metrics, and result analysis.

The English summary is being prepared. Showing the original description.

SebastianLuser/claude-code-arcane3Updated Oct 27, 2026

Web/mobile accessibility decision guide: WCAG 2.2 AA, ARIA, keyboard nav, focus management, contrast, testing. Use for: a11y, accessibility, wcag, aria, screen reader, keyboard, contrast.

The English summary is being prepared. Showing the original description.

SebastianLuser/claude-code-arcane3Updated Oct 27, 2026

Generate, iterate, and scale ad creative for paid advertising across Google, Meta, LinkedIn, and X. Covers platform specs, creative frameworks, and quality validation.

The English summary is being prepared. Showing the original description.

SebastianLuser/claude-code-arcane3Updated Oct 27, 2026

Musica interactiva para juegos: layering vertical, re-secuenciacion horizontal, stingers, reglas de transicion con sync points, y mapeo de estados de gameplay a musica. Usar para: musica adaptativa, sistema de musica dinamica, transiciones musicales, combat music.

The English summary is being prepared. Showing the original description.

SebastianLuser/claude-code-arcane3Updated Oct 27, 2026

Design multi-agent systems, create agent architectures, define communication patterns, and build autonomous agent workflows with structured evaluation frameworks.

The English summary is being prepared. Showing the original description.

SebastianLuser/claude-code-arcane3Updated Oct 27, 2026

Inter-agent communication protocol for C-suite agent teams. Defines invocation syntax, loop prevention, isolation rules, response formats, and quality loops.

The English summary is being prepared. Showing the original description.

SebastianLuser/claude-code-arcane3Updated Oct 27, 2026

See all skills by SebastianLuser

Report a problem with this skill