[Infrastructure] Backup: errors silently swallowed, unencrypted, only 7-day retention

[Flegma]

Summary

Database backup system has reliability and security gaps.

Findings

• postgres-backup-cronjob.yaml — multiple || true statements hide failures.
• Same file — pg_dump without encryption, zip without password, S3 without SSE.
• Same file — daily with 7 retained. No weekly/monthly tiers.

Impact

Backups can fail silently. Unencrypted if storage compromised. Only 7-day recovery window.

Suggested Fix

Remove || true from critical ops. Encrypt with GPG. Enable S3 SSE. Add tiered retention. Alert on failure.

[Flegma]

Closed by #427 (merged 2026-04-24).