Day-2 operations runbook

Backups, migrations, seeds, school cron, activity SIEM export, PWA shell, and troubleshooting.

Deploy & admin guide for day and boarding schools.

Last updated July 24, 2026

After go-live, operators maintain the system through regular backups, monitored deploys, module cron tasks for fees and homework, SMTP checks, and compliance exports from the activity log.

Deploy commands

Local/staging update - deploy/update.sh from repository root
Production - deploy/deploy_from_mac.sh bootstrap or update via SSH
Migrations - npx prisma migrate deploy before build
Default seed - db:seed:users creates missing base logins on every deploy
Full demo - npm run demo (SSH + db:seed:all) only when explicitly needed

Daily cron

Wire FEES_CRON_SECRET (preferred) or SESSION_COOKIE and schedule scripts/run-school-cron.sh. The script posts autopay run-due, fee dunning, homework due reminders, and scheduled notice publish; with ADMISSIONS_CRON_SECRET it also expires admissions offers.

Operational checklist

Task	Frequency	Notes
Database backup	Before each migration	mysqldump when mysql-client available
Activity log export	Monthly (or per policy)	CSV or SIEM NDJSON from /activity-log - retain per school policy
Email / SMTP test	After SMTP change; staging before go-live	/settings/email-test
School cron	Daily	scripts/run-school-cron.sh - fees autopay/dunning + homework reminders
Online payment mode	Before fees season	FEES_ONLINE_PAYMENT_MODE=simulated on staging; razorpay only with live keys
Staging E2E	Before admissions/fees season	Playwright specs in CI
SSL and NEXTAUTH_URL	After domain change	Must match public URL
PWA shell smoke	After release touching SW/manifest	Confirm install prompt, /offline fallback, network-first app

Compliance ingest

Auditors and SIEM pipelines can export activity log as NDJSON (application/x-ndjson) from /activity-log - Export SIEM (NDJSON). Format aliases include ndjson, jsonl, and siem on the activity-log API. Align retention with school policy; auto-purge is not built-in.