docker-maintenance/ adds a systemd timer + prune.sh for the root LV that holds
Docker's data-root and has filled to 100% before, risking ENOSPC corruption.
The script sticks to the safe reclaim set (builder cache, dangling images,
stopped containers) and deliberately avoids `-a` and volume pruning, which can
destroy live data when run unattended.
kanboard/backup.sh and healthcheck.sh bring Kanboard in line with the other
services. seafile/ and vaultwarden/ backup scripts get fixes carried from the
stability audit.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
- backup.sh: runs every 3 days via root crontab, uses built-in container
backup command, copies db/config/rsa_key to /mnt/backups/vaultwarden,
keeps last 5 backups, notifies Zabbix item vaultwarden.backup.ts (id 70368)
- Zabbix trigger fires if no backup received in 4 days
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
