NixOS/specs/004-vps-migration/quickstart.md

Quickstart: VPS Migration

Prerequisites

• Access to this repo and the new VPS host configuration
• Existing iptables ruleset file available at repo root: iptables
• VPN keys present in the secrets system
• SSH public keys present in secrets/ssh/

Steps

1. Review the spec and clarifications:

   • /home/jawz/Development/NixOS/specs/004-vps-migration/spec.md

2. Ensure secrets are available:

   • VPN private/public keys are stored in the secrets system
   • secrets/ssh/ed25519_deploy.pub and secrets/ssh/ed25519_lidarr-reports.pub exist

3. Update host configuration:

   • Set new VPS as primary reverse proxy host
   • Enable proxying for all enabled services (services remain on host server)
   • Apply iptables ruleset as-is
   • Enable wireguard on VPS and expose port
   • Add service users and admin SSH keys
   • Update VPS public IP to 45.33.0.228 in SSH configuration
   • Update host server VPN client to target the new VPS

4. Provide and review legacy proxy config:

   • Supply caddy files for subdomain comparison

5. Migrate analytics data:

   • Export data from existing server
   • Import into new server
   • Validate historical data is present

6. Run verification steps for each task (per spec FR-012).