
tech.website-down·versija 1.0.0·melnraksts
Ārēja pārbaude apstiprina darbības pārtraukumu, un pierādījumi norāda bojāto sistēmas slāni. Vietnes darbība ir atjaunota, bet incidents reģistrēts pēcanalīzei.
The company website or web app is unreachable or broken for visitors. Not for a slow site that still answers — that is a performance task, not an outage. Not for a compromised or defaced site — stop, do not "fix" it, escalate to the owner and use tech.security-audit; restoring a compromised site can destroy evidence. Not for mail-only failures — use tech.dmarc-review or the mail runbooks. After the site is back, the follow-up run is ops.incident-postmortem.
Jebkurš solis var gaidīt līdz datumam un atveras pats; katrs noslēgts solis atstāj pierādījumu (piezīmi, saiti, skaitli).
Open the site from at least two independent vantage points (public checker + mobile network, not the office Wi-Fi). Check DNS resolution (bc dns lookup of the domain) and note whether the name resolves at all.
Izdarīts, kad the outage is confirmed with two observations, or refuted — if it only fails from one vantage point, record that and stop; it is not an outage.
Work down the stack in order: DNS (does the name resolve to the expected address?) → certificate (is TLS valid, does tech.ssl-expiry-check logic apply?) → hosting (is the server up, does the provider status page report an incident?) → application (does the server answer with a 5xx or a broken page?).
Izdarīts, kad one layer is named as the fault with the evidence next to it, and the other three are marked checked with their result.
Send the owner three lines: what is down since when, which layer is at fault, what the fix will be.
Izdarīts, kad the owner has acknowledged and said whether customers must be told.
Apstiprinājums · S4 · īpašnieks — izpilde apstājas, līdz nosaukts cilvēks ieraksta lēmumu
If the outage is visible to customers and will last longer than ~15 minutes, approve a short status note (channel and wording are the owner's call). The agent never posts it unilaterally.
Izdarīts, kad a decision is recorded: note sent, or deliberately not sent, and why.
One change at a time, in the layer named in S2: correct a DNS record via bc dns; renew or reissue the certificate through the hosting panel; restart or redeploy the app from the deploy history. Wait out the DNS TTL before judging a DNS fix.
Izdarīts, kad the site answers 200 over HTTPS from an outside vantage point.
⛔ Do not change two things at once — if the second change breaks something, you no longer know which one fixed or broke it.
Apstiprinājums · S6 · īpašnieks — izpilde apstājas, līdz nosaukts cilvēks ieraksta lēmumu
Neatgriezenisks solis · S6 — aģents to nekad nenoslēdz viens
Rolling back a deploy discards the changes it carried; the owner decides whether the release ships later. Restore the last known-good version from the deploy history.
Izdarīts, kad the last known-good version is live and the site answers from outside.
⛔ A rollback past the point of a data migration can lose data — if a migration ran, stop and escalate to agents.database-migration instead of rolling back blind.
Two vantage points again: HTTPS 200 on the homepage and on a critical path (login, checkout, contact form — a homepage that answers while checkout 500s is not "restored"). Certificate valid. DNS answers consistent across resolvers. Monitoring green.
Izdarīts, kad every check passes and the answers match what the zone says.
Write the incident record: timeline with timestamps, failing layer, evidence, every change made and when, the owner's S4 decision. Create the follow-up with bc tasks add linking to ops.incident-postmortem.
Izdarīts, kad the record exists and the postmortem task points at it.
| Pazīme | Rīcība |
|---|---|
| Site resolves for some visitors, not others | Stale DNS — the old TTL has not run out everywhere; verify the new answer is correct on every nameserver, then wait it out. Do not "fix" it again. |
| Homepage answers, checkout or login does not | The outage is not over; treat the broken path as the outage, go back to S2, name the layer. |
| Certificate renews but browsers still warn | An intermediate chain problem, not expiry — test with an external SSL checker, reissue with the full chain. |
| The provider status page shows an incident | Do not restart anything on your side; wait for the provider, keep checking, extend the customer note if the owner approved one. |
| Cause cannot be named in S2 | Record what was checked and the results, restore the last known-good version (S6 with approval), and hand the open question to the postmortem. |
S1 confirmation observations with timestamps · S2 layer verdict with evidence · every change made, in order, with time · the owner's S4 and S6 decisions (who, when) · S7 verification outputs · the incident record id and the postmortem task link.
After every 3 runs ask: how long from alert to restored, and which step waited longest? Was the failing layer named correctly on the first try, or did a step get wasted on the wrong layer? Did any rollback lose data or discard work that then had to be rebuilt? Did any customer notice the outage before the S4 note went out? A new version changes the step that caused the wait or the miss, and says so in its change note.
Nosaukums un kopsavilkums ir latviski. Detalizētā izpildes kārtība pagaidām ir kanoniskajā angļu valodas versijā; juridiskos un finanšu soļus publicēsim latviski tikai pēc cilvēka pārbaudes.
Obligātās sīkdatnes tur sarunu kopā. Analītika ir izslēgta, līdz tu atļauj — tā neliek nevienu sīkdatni un neglabā ierīces identifikatoru.Necessary storage keeps your conversation together. Analytics is off until you allow it — it sets no cookie and stores no device identifier. Ko mēs glabājamWhat we store