5af94062d2
scripts/backup.sh runs pg_dump inside the ecosplay-auth-db container, writes a gzipped, timestamped dump to /backup/ (overridable via BACKUP_DIR), and keeps the latest N dumps (RETENTION=14 by default). Only the Postgres volume carries state that isn't reproducible from code (users, credentials, TOTP secrets, sessions, brute- force counters), so the rest of the repo is not bundled here. Intended as a base that can later feed a cron job or be piped to off-site storage (S3, SFTP, borg). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>