init

specs/004-vps-migration/quickstart.md

@@ -0,0 +1,36 @@
+# Quickstart: VPS Migration
+
+## Prerequisites
+
+- Access to this repo and the new VPS host configuration
+- Existing iptables ruleset file available at repo root: `iptables`
+- VPN keys present in the secrets system
+- SSH public keys present in `secrets/ssh/`
+
+## Steps
+
+1. Review the spec and clarifications:
+   - `/home/jawz/Development/NixOS/specs/004-vps-migration/spec.md`
+
+2. Ensure secrets are available:
+   - VPN private/public keys are stored in the secrets system
+   - `secrets/ssh/ed25519_deploy.pub` and `secrets/ssh/ed25519_lidarr-reports.pub` exist
+
+3. Update host configuration:
+   - Set new VPS as primary reverse proxy host
+   - Enable proxying for all enabled services (services remain on host server)
+   - Apply iptables ruleset as-is
+   - Enable wireguard on VPS and expose port
+   - Add service users and admin SSH keys
+   - Update VPS public IP to `45.33.0.228` in SSH configuration
+   - Update host server VPN client to target the new VPS
+
+4. Provide and review legacy proxy config:
+   - Supply caddy files for subdomain comparison
+
+5. Migrate analytics data:
+   - Export data from existing server
+   - Import into new server
+   - Validate historical data is present
+
+6. Run verification steps for each task (per spec FR-012).