Recovered the operator-requested old Wiki.js pages into the existing wiki at https://knowledgebase.julianbechtold.ch. Existing content was preserved.
kryptovisor.auth.home.lan./mnt/fastdata/disks/drg-knowledgebase.qcow2; hostname verified as drg-knowledgebase.drg-knowledgebase-20240205 internal snapshot.The old wiki protected the Privat prefix using a Guests deny rule, despite the pages themselves having isPrivate=false. Restored that rule before publishing recovered content. Added the same deny rule to the current codex group, preserving the old administrator-only access boundary. Existing group permissions and existing rules were retained. The administrator remains in group 1. The SingularityAi group already has access limited to its own prefix.
Two scoped rollouts of internalkb-wikijs loaded the permission changes. No deployment identity, runtime flag, user identity, credential, or broader permission was added.
pg_restore --list validated its 202 archive objects.A restricted recovery checkpoint is at /home/ax_julian/.codex/secrets/wiki-recovery-20261013/, with directory mode 0700. It contains the pre-change database dump and recovery receipts, is bounded to 128 MiB, and is retained for rollback through 2026-10-20. No background cleanup was scheduled. Cleanup responsibility belongs to the host administrator's normal housekeeping.
The disposable database/container, extracted RAM copy and read-only NBD connection are cleaned up after verification; the original VM disk remains the recovery source. A rollback must use the receipts to identify recovery-created records and account for any subsequent user edits; do not blindly replace the live database with the full checkpoint.
The operator reported that the combined navigation was messy. The October 13 acceptance covered page content, assets and privacy, but missed the organisation of the combined wiki. Read-only comparison with the pre-import dump found existing folder titles, page membership and the navigation configuration intact; recovery introduced a separate capitalised Making root beside the existing lowercase making, and left the original Welcome homepage behind an archive path.
Corrective live work:
/ and /en/home addresses, retaining current page ID 1./en/server-documentations/drg-k8s/changes/2026-10-14-home-before-restoration (page ID 523).Making/... pages into the existing making/... branch, retaining their IDs, contents, titles, tags and nested hierarchy. Current pre-existing making pages and their paths were retained. The old capitalised recovery paths are now lowercase at their first segment; the original import receipts are historical, and the structure-correction receipts record the new locations.recovered-2025 branch from navigation by moving its retained placeholder page into the existing changes folder. No pages or attachments were deleted.Verification:
Restricted checkpoint: /home/ax_julian/.codex/secrets/wiki-structure-20261014/, bounded to 128 MiB with retention through 2026-10-21. Contains the before-repair dump and correction receipts. The original October 13 dump and receipts remain historical checkpoints; neither dump should blindly replace subsequent user edits. The disposable source PostgreSQL container, RAM copy and image were removed; the original VM disk stayed unchanged. No scheduled cleanup was created.