Preview mode that survives a reboot, and a fallback log that survives one too

2026-08-22 13:52:34 -04:00
parent ac17be2cd9
commit 15d802ae3d
5 changed files with 77 additions and 5 deletions
@@ -865,6 +865,17 @@
                                    # Success returns on the first try, so a healthy cycle costs
                                    # nothing extra. Only a failure pays: 3×4s + 2×2s = 16s worst
                                    # case, which must stay under FALLBACK_CHECK_INTERVAL.
+    FALLBACK_DRY_RUN=false          # run the daemon in PREVIEW mode, permanently
+                                    # Survives array start, unlike a --dry-run typed at a shell:
+                                    # array_started.sh launches with no arguments, so a hand-run
+                                    # preview is replaced by the LIVE daemon at the next boot.
+                                    # Decides nothing, starts nothing, moves no DNS, sends no
+                                    # notification — it only reports what it WOULD have done.
+                                    # Set true to observe real outages before arming for real.
+    FALLBACK_LOG_MAX_MB=5           # size cap for data/logs/fallback.log before one rotation
+                                    # Event-only output (the default, no --log) is a few lines
+                                    # per incident and holds years; --log fills this in about a
+                                    # fortnight and keeps the previous one as fallback.log.1
    FALLBACK_STATE_FILE="$STATE_DIR/fallback_state.db"
    FALLBACK_ENABLED=false          # set true once both servers are configured and paired
                                    # false = suppresses "not running" warnings in status scripts