# platform/velero

**Velero** — off-cluster backup and DR of volumes + Kubernetes resource state.

- **Governing ADR:** [ADR-0003 — Longhorn (+ bulk tier + Velero)](../../../home-network-k3s/decisions/adr-0003-storage-longhorn.md)
- **Spec:** [docs/04 — Storage & State](../../../home-network-k3s/docs/04-storage-and-state.md)
- **Serves:** R-STATE-03
- **Owner:** WS-STORAGE

## What this stub is

Flux `HelmRelease` with a placeholder off-cluster backup target (S3-compatible/NFS) and scheduled
backups whose cadence/retention are overlay knobs (`${VELERO_*}`, R-ENV-02). Backup credentials are
referenced **by name** (`velero-backup-credentials`), **SOPS-encrypted** (WS-SEC). Works with Longhorn
volume backups.

## TODO (later phases)

- **OQ-2 (human):** concrete off-cluster target (endpoint, bucket, resilience) is a prerequisite.
- **Phase 4 (WS-STORAGE):** wire the target + Longhorn backups; prove a **DR drill** — restore a
  namespace + volumes from off-cluster backup (R-STATE-03, Phase-4 exit gate).
- **DR-critical services** (Gitea, Keycloak, Nextcloud) get off-cluster backup + mirror per docs/05.