Docs DR / offline export

The Bedrock Cybersecurity documentation lives on Cloudflare Pages behind CF Access. During an incident — site down, CF Access misconfigured, network partition — the runbooks you need most can become unreachable. This procedure produces a self-contained offline copy.

When to run

• Quarterly, alongside the freshness re-validation pass (see Coverage & freshness).
• Before any planned change to the Pages project, CF Access policy, or DNS.
• During DR tabletop exercises.

Produce the export

cd bedrock-docs
bun run docs:build          # render the static site
bun scripts/dr-export.ts    # bundle it

Output: dr-export/bedrock-docs-offline.tar.gz, containing:

Folder	Contents
site/	Rendered static HTML — open site/index.html in any browser, no server needed
source/	Raw markdown source tree
MANIFEST.txt	Source commit, date, and usage notes

Store it

Drop the archive in the offline backup location used by the offline backup procedure so it survives alongside the other break-glass material. Keep the two most recent quarters.

Verify

Extract the archive on a machine with no network and confirm site/index.html opens and internal links resolve:

tar -xzf bedrock-docs-offline.tar.gz -C /tmp/docs-dr
open /tmp/docs-dr/site/index.html   # or xdg-open

The access-model half of this story (single-customer SSO-ready CF Access policy) is a separate infrastructure change owned by Rory.