For DevOps and operators#

Your questions#

Question	Answer and where
How do I install it?	Creating workspaces: scripts/provision-workspace.sh, TLS, first administrator
What is the order of things?	Operations: start here
What does each variable do?	Configuration reference
Which secrets exist and how do I rotate them?	Secrets and keys
What is encrypted, and how do backups work?	Encryption, backup, restore and DR
How do I upgrade, and roll back?	Upgrade and migrations; migrations run when core-api starts
What do I monitor?	Observability and logging: health endpoints and logs; no metrics endpoint
How much load can it take?	Capacity and scaling (no load test has been run)
How do I run shared rate limits across gateway processes?	Optional Valkey: API clients, section 9
How do I create a demo instance?	Public sandbox
Which object stores work?	Object storage

Runbooks never rehearsed#

Restore on a new host, upgrade, workspace removal and re-creation are written from the code and not yet run end to end: rehearse each once and record the date.