infra/ai-memory/project_fusionpbx_backup.md

name, description, metadata

name	description	metadata
fusionpbx-backup	FusionPBX (134.209.72.226) config backup to GitHub — weekly cron, restore wizard, PostgreSQL dump, full rebuild guide	node_type type originSessionId memory project c454fc50-f93d-4ddd-b9f3-f3f442e89fb9

GitHub repo myronblair/fusionpbx-config (private) — PostgreSQL DB dump + FreeSWITCH configs + full rebuild guide.

Why: FusionPBX stores ALL config in PostgreSQL — extensions, dialplans, SIP gateways, IVR, ring groups, devices, voicemail, users. The DB dump IS the backup.

How to apply: Reference when discussing FusionPBX DR, the backup cron, or if the server needs to be rebuilt. See fusionpbx-freeswitch-setup for full FusionPBX operational config.

SSH Access (critical — port 22 firewalled from internet)

Only accessible from: 107.178.2.130 (FortiGate home) and 97.154.109.245 (FortiGate secondary). From anywhere else, relay through DO:

sshpass -p 'Gonewalk1974!@#' ssh -o StrictHostKeyChecking=no root@165.22.1.228 \
  'sshpass -p "Joker1974!@#" ssh -o StrictHostKeyChecking=no root@134.209.72.226 "command"'

Repo Structure

• database/fusionpbx.sql.gz — Full PostgreSQL dump (gzip compressed; 306MB raw → ~29MB)
• database/postgres_globals.sql — PostgreSQL roles/passwords
• freeswitch/ — vars.xml, freeswitch.xml, extensions.conf, sip_profiles/, autoload_configs/
• fusionpbx-app/config.php — DB credentials for FusionPBX web app
• nginx/fusionpbx.conf — nginx config (includes provisioning URL rewrites)
• fail2ban/ — jail.local (trusted IPs: 107.178.2.130, 97.154.109.245)
• network/ — netplan 50-cloud-init.yaml, hosts, hostname
• systemd/ — 9 FusionPBX service units (active_calls, email_queue, event_guard, etc.)
• ssh/authorized_keys
• recordings/ — call recordings (~4KB currently)

Schedule

Weekly Sunday 5am: 0 5 * * 0 /usr/local/bin/fusionpbx-backup >> /var/log/fusionpbx-backup.log 2>&1

Manual trigger

/usr/local/bin/fusionpbx-backup on the fusion server (or via DO relay)

What's NOT backed up

• SSL certs — re-issue: certbot --nginx -d fusion.orbishosting.com
• FusionPBX web app /var/www/fusionpbx/ — reinstalled by official installer
• FreeSWITCH binary — installed by FusionPBX installer
• Voicemail audio files — small, not critical

Full Rebuild Flow (30–45 min)

1. New Debian 12 droplet

Create fresh DO droplet, same region. SSH in (relay via DO if needed).

2. Clone repo and run restore

apt update && apt install -y git
git clone https://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@github.com/myronblair/fusionpbx-config.git /opt/fusionpbx-config
bash /opt/fusionpbx-config/restore.sh

3. Restore script phases (interactive)

1. SSH authorized_keys + hostname
2. Run FusionPBX official installer (separate terminal, ~10-15 min): wget -O - https://raw.githubusercontent.com/fusionpbx/fusionpbx-install.sh/master/debian/install.sh | bash → When asked for domain: fusion.orbishosting.com
3. Critical: PostgreSQL restore — stops all services, drops+recreates DB, restores from .sql.gz
4. FreeSWITCH config files
5. FusionPBX app config.php (DB credentials)
6. nginx config
7. fail2ban
8. Recordings
9. Backup script + cron
10. SSL (manual: certbot --nginx -d fusion.orbishosting.com)

4. Post-restore checks

• Update fail2ban trusted IPs if FortiGate IP changed
• Update Yealink provisioning URL if server IP changed (was 134.209.72.226)
• Verify SignalWire trunk: FusionPBX → Accounts → Gateways
• Delete Sofia XML cache: rm /var/cache/fusionpbx/FusionPBX.configuration.sofia.conf
• Test ext 1000 (Myron Yealink T48S at 10.48.200.43)
• Test ext 1001 (Tommy)
• Test IVR 900

Key Credentials

Item	Value
FusionPBX web	https://fusion.orbishosting.com (admin / fY7XP5swgtpbzrYLhkeVYkA4744)
Root SSH	root / Joker1974!@#
PostgreSQL	fusionpbx database, user fusionpbx
Relay DO server	root@165.22.1.228 / Gonewalk1974!@#

Architecture Notes

• FusionPBX uses Lua XML handler — FreeSWITCH queries PostgreSQL via PHP/Lua for all routing. Static XML config in /etc/freeswitch/ is mostly skeleton.
• SignalWire SIP trunk uses transport=udp — TCP caused re-INVITE issues (gateway External URI must end in ;transport=udp)
• Ext 1000 (Yealink T48S) registers from behind FortiGate on port 5080 with aggressive-nat-detection=true
• FusionPBX cache at /var/cache/fusionpbx/FusionPBX.configuration.sofia.conf — delete to force full Sofia reload

PostgreSQL Dump Size Note

306MB uncompressed, 29MB gzipped. Exceeds GitHub's 100MB limit uncompressed. Must use gzip (pg_dump | gzip > fusionpbx.sql.gz). Restore.sh handles both .sql.gz (zcat) and plain .sql formats.