Recovery gate
Immich V3 Migration Runbook
Prepare an Immich migration with consistent database and asset backups, supported vector storage and compatible clients. Test a restored copy before relying on container health, search availability or image-version changes.
Unraid 7.3 Internal Boot: Move Off USB Without Losing Recovery
Plan Unraid internal boot around configuration protection, licensing and recovery, not just a successful first boot. Evaluate mirrored-device failure and retain the supported USB-first restoration path.
Proxmox 9.2 Dynamic Load Balancing: Useful HA Or Small-Lab Overkill?
Decide whether Proxmox load balancing addresses a measured capacity problem. Compare workload eligibility, spare resources and migration impact, keeping cluster-wide HA maintenance separate from balancing controls.
Proxmox Datacenter Manager 1.1: Multi-Node Visibility Without A Mega-Cluster
Evaluate centralized guest, snapshot and storage visibility across independent Proxmox remotes while preserving direct node access. Shared management does not create quorum, shared storage or high availability.
Watchtower Is Archived: Replace Blind Container Updates
Replace unattended Watchtower changes with an owned process for release discovery, image selection and deployment approval. Keep application data recovery separate from pinning or reverting a container image.
The 2026 Secure Boot Certificate Transition For Proxmox And Debian
Separate physical-host firmware, Debian boot packages, Proxmox virtual firmware and Windows guest trust during Secure Boot planning. Rehearse console and recovery access before changing enrolled certificates.
ESPHome 2026 Fleet Security Migration
Separate ESPHome API encryption, OTA authentication and firmware recovery when planning fleet changes. Use representative devices to check control, updates and reconnection before expanding beyond a recoverable canary.
Home Assistant Matter Server 9.0: Migration And Post-Upgrade Proof
Prepare Home Assistant and Matter controller data together before migration. Check existing device control, new commissioning, applicable updates and consistent recovery rather than treating a running server as success.
OPNsense 26.7 Migration: Source NAT, Legacy Rules, And Rollback
Rehearse OPNsense upgrades and source NAT conversion on an isolated clone. Compare effective rules and client traffic, including WireGuard and multi-WAN behavior, before relying on prior-release recovery.
RouterOS Stable Still Needs A Canary: A 7.23 Upgrade Runbook
Choose a RouterOS upgrade canary by hardware, packages and active features. Preserve off-device backups and local recovery, then validate representative services before expanding across unlike routers.