IT issues and binds the vsql certificate by hand. Gitea issue 5 still tracks the switch to VISUAL_ENCRYPT=yes. Co-Authored-By: Claude Opus 5.5 <[email protected]>
scripts
backup/
The nightly pg_dump backup with its systemd timer, and the restore script, for the native VMs (no Docker). See backup/README.md and docs/DEPLOY.md, "Backups on a VM" and "Restore on a VM". The VM install kit itself (units, launcher, install and upgrade) is in deploy/vm/.
Export-PescoCaBundle.ps1
Run on a domain-joined PC. Exports every unexpired PESCO CA certificate from the Windows stores to one PEM bundle and copies it to docker-1 with scp (default target ~/packetstation/test/ca/pesco-ca.pem). Use -Remote for another path and -NoCopy to only write the file. It warns on SHA-1 signed certificates; see docs/DEPLOY.md.