Runbooks

Recovery procedures for the fleet. Each one is minimal and assumes fresh context.

• Restore from backup — pull data/config back from restic
• Rebuild a node — bring vps-apps or pi-home back from zero
• Netbird control plane down — mesh outage triage
• Certificate renewal — public TLS hygiene

Conventions: addresses, hostnames and credentials are placeholders; the operator's SSH config and the mesh dashboard hold the real values. Destructive steps warn inline and need explicit approval.