Double insurance: snapshot + local backup
🛡 Insurance 1 · Server snapshot: before the official switch (Step 9), take a system-disk snapshot in the Alibaba Cloud console (manual boss action, done in seconds). If anything goes wrong, the whole server can be restored to the exact moment before switching.
🛡 Insurance 2 · Local backup: the local staging database and the product package are kept permanently and covered by the /backup/ backup system with daily automatic backups. Even if the server is lost entirely, the system can be fully rebuilt locally.
See the /backup/ backup center for the backup system details.
Rollback Decision Tree
❓ A problem is found after go-live
🟡 Small problem (layout glitch / one feature broken)
→ Fix it directly on the new system; the old system is still running in parallel, business is unaffected.
🔴 Big problem (wrong data / system unusable)
→ Roll back immediately: point DNS back to the old system, or restore the server snapshot → the old system becomes official again → fix, then re-run the deployment flow.
Rollback Timing
DNS switch-back takes effect in about 10 minutes; snapshot restore takes about 10–30 minutes; rebuilding from the local backup takes about 1–2 hours depending on data volume.
PENDING · awaiting boss approval
⚠ The boss is asked again before every single step starts