What’s live
Ten domains in production on the same account — support, files, voice, client portal, recovery — each in its own isolated Worker or Pages project, with a hard rule: deploys are never automatic and total cost never exceeds $5/month.
Continuity
- 3-2-1 backup: encrypted restic backup of the work environment to a local server and to R2, daily. The August cleanup removed from the backup what already lived elsewhere (4.7 GB of images, 3.3 GB of captions) — rule: only what exists nowhere else goes into the backup.
- Recovery: a password-protected page delivers an encrypted kit (~250 KB) that rebuilds credentials, memories, keys, and the repository on a clean machine. Tested end to end: 24 items in place with correct permissions, byte-identical content, 8/8 checks green. Repackaged weekly by cron, because a frozen kit is a dead credential.
- Remote access without sudo: Cloudflare tunnels for Linux and Windows, key-only, with a kill switch.
Why this matters for a client
Because the project I deliver doesn’t depend on one of my machines being on — and because I know, from testing, exactly how long it takes to come back.