Harbor Lane Bikes

This pack covers the things customers see online and the shop's email. It doesn't cover the till or the accounting software, which are looked after by their own suppliers.

Every account should belong to the business, with at least two people able to get in. This table shows how things stand today.

We never write passwords in this pack. The shop keeps them in a shared password manager that Maya and Sam can both open.

# Current DNS (Cloudflare) · harborlanebikes.example
@      A      203.0.113.24          proxied
www    CNAME  harborlanebikes.example  proxied
@      MX     1  mx1.mail-provider.example
@      TXT    "v=spf1 include:_spf.mail-provider.example ~all"
sel1._domainkey  TXT  "v=DKIM1; k=rsa; p=…"
_dmarc TXT    "v=DMARC1; p=none; rua=mailto:[email protected]"

The website is copied automatically every night, and a second copy goes somewhere else once a week. Somebody last checked that a backup actually works on 4 March 2026. It took 25 minutes to restore.

Open the situation that matches what's happening. Each one is written so that whoever is on hand can follow it.

# 1. Check origin vs Cloudflare
curl -sI https://harborlanebikes.example/ | head -1
curl -sI --resolve harborlanebikes.example:443:203.0.113.24 https://harborlanebikes.example/ | head -1

# 2. On the server (ssh [email protected])
sudo systemctl status nginx php8.2-fpm mariadb
sudo tail -n 50 /var/log/nginx/error.log

# 3. Full restore: Brightline panel → Snapshots → last good → Restore
#    or partial DB restore from the off-site copy:
wp db export pre-restore.sql
wp db import /tmp/hlb-db-YYYY-MM-DD.sql
wp cache flush

We check the website every five minutes. One failed check is ignored, because websites hiccup. Two in a row sends an alert to Maya and Sam. When it's working again, they get a second message.

# Example alert payload (tlf.alert.v1)
{
  "event": "down",
  "client": { "id": "harbor-lane-bikes", "name": "Harbor Lane Bikes", "timezone": "shop's local zone" },
  "check":  { "type": "website", "target": "https://harborlanebikes.example/" },
  "observation": { "http_status": 503, "consecutive_failures": 2 },
  "occurred_at": "2026-10-14T12:10:00Z"
}

Go down the list in order. Phone numbers are in the shop password manager under "Contacts".

1. Sam Okafor · web developerBuilt the website. Can fix almost anything on it, restore backups and change email settings.
   Weekdays
   08:00–18:00
2. Brightline Hosting · supportCan restart the server and restore backups. Can't change the website itself.
   24 hours
   every day
3. The Logic LabWe can help you work out what's wrong and who to call. We don't change your website ourselves.
   Weekdays

These are the things that worried us. None of them are emergencies today, but the first two could cause real trouble if left.

• Fix soon
  Only Maya can get into the domain account, and the card on file expires in November.If the renewal fails while Maya is away, the website and email could stop working.
• Fix soon
  One staff login to the website has no second security step.If Leo's password leaked, someone could change the website.
• Worth fixing
  Only Sam knows how the website's design was changed.There's no saved history of his changes, so another developer would be starting partly blind.
• Worth fixing
  Email isn't backed up separately.Deleted emails can only be recovered for a limited time through the email provider.
• Note
  Nobody is sure who set up the email security records.We've asked Sam. Until we hear back, this stays marked as a gap.

In this order. Tick them off as you go. The boxes work on screen, and they print blank if you'd rather use paper.

• Update the card on the domain account, and add Sam as a second contact.Maya · by 30 Nov
• Switch on the second security step for every website login.Sam · by 30 Nov
• Start keeping a saved history of website design changes.Sam · by Jan
• Decide whether email needs its own backup.Maya · by Jan
• Test restoring a backup again.Sam · March 2027