bash scripts/backup.sh writes both database dumps, the cluster-level Kyoube roles and the
/kyoubeai home volume (the board key, agent workspaces, your harnesses and their logins, and the list
of kept system packages; download caches are left out) to backups/<timestamp>/.
bash scripts/restore.sh backups/<timestamp> puts all of it back, onto this machine or a new one. The
app is stopped while the restore runs, and everything written since the backup is replaced.
Keep a copy of .env with your backups, because a restore onto a new machine needs the same
BETTER_AUTH_SECRET and database passwords. docs/operations.md covers nightly
backups with cron, off-site copies, logs, health checks, rotating the board key and resource limits.