Operations Runbook

Monitoring

• Service status: systemctl status makerflow
• Health endpoints: /healthz, /readyz
• Review error logs during deploy and auth updates
• Watch DB growth and backup success

Backups

SQLite path: data/makerspace_ops.db

./scripts/backup_db.sh

Security Baseline

• HTTPS only in production
• MAKERSPACE_COOKIE_SECURE=1
• Strong MAKERSPACE_SECRET_KEY (64+ chars)
• Rotate bootstrap admin credentials
• Periodic role/access review for workspace admins and owners

Operational Troubleshooting

Cannot log in / redirected to login repeatedly

• Verify session writes are successful in DB logs.
• Verify a stable secret key is configured.
• Confirm secure cookie setting matches HTTPS reality.

CSRF token mismatch

• Clear cookies and re-authenticate.
• Avoid mixed domains/protocols during form posts.

500 errors after DB changes

• Inspect app logs for SQL errors.
• Run bootstrap/migration scripts before serving traffic.
• Confirm PostgreSQL connection URL includes sslmode=require.

Post-Release Checklist

1. Run regression and security scripts.
2. Update website/wiki docs.
3. Verify release notes and file map are current.