Recent changes
Wednesday November 04 2026
-
Certificate expiry Updated Markdown page
Runbook for browser warnings about a public website's HTTPS certificate - see what is served, renew under Velocity (ssl show and renew, automatic Let's Encrypt renewal) or under Apache, nginx or a panel, and prevent it…
-
Data breach notification framing Updated Markdown page
How the technical team supports a public body's decision on notifying a personal data breach - establishing what data, whose, and when, with the audit trail, logs and exports Exponential provides - without giving legal…
-
Database unreachable Updated Markdown page
Runbook for "We'll be right back" pages caused by a database Exponential cannot reach - check the server, the credentials, connections and disk per engine, switch to a standby if you run one, and recover with caches…
-
DDoS and probe floods Updated Markdown page
Runbook for a public website under a flood of requests - telling probes from real load with security.log and the error digest, what Exponential does and does not block, keeping the site up with caches, request rules and…
-
Defacement Updated Markdown page
Runbook for a public website showing content nobody authorized - contain with maintenance mode, find out whether it came through an account (audit trail) or through the files (file consistency check), restore, and…
-
Disk full Updated Markdown page
Runbook for a server whose disk filled up under a public website - find what grew, free space only through the safe commands (caches, log archives), never touch uploads, settings or the database by hand, and watch what…
-
Incident response basics Updated Markdown page
The common frame for every incident on a public-sector Exponential site - roles, severity, the first fifteen minutes, keeping evidence, communicating with the public, and closing with a review - with the tools…
-
Mail problems Updated Markdown page
Runbook for mail that does not arrive (password resets, form confirmations, notifications, newsletters) or that goes where it should not (a test copy mailing citizens) - transport settings, cron, preferences, sender…
-
Mass content error Updated Markdown page
Runbook for a large mistake in content - a subtree removed, a wrong section or state set on many pages, a bulk import gone wrong, an announcement published too early - with the trash, version history, content jobs, the…
-
Post-incident review Updated Markdown page
Holding a blameless review after an incident on a public website - building the timeline from the audit trail and logs, finding causes and contributing factors, agreeing actions, and the record your organization and…
-
Site down Updated Markdown page
Runbook for a public website that does not serve pages - confirm, read which error page visitors get, find the cause (database, maintenance left on, missing libraries, an uncaught error, the web server or Velocity)…
-
Stale cache Updated Markdown page
Runbook for a public site that keeps showing old content or old code after a change - which cache holds it (content view cache, templates, INI, the HTTP cache, Velocity's response cache, static cache, a CDN, the…
-
Suspected account compromise Updated Markdown page
Runbook for a staff or administrator account that may be used by someone else - disable it, end its sessions, look at what it did in the audit trail, undo changes, reset the password and second factor, and check for…
-
Monitoring Updated Markdown page
Index of the pages on watching a public-sector Exponential site - an overview with a routine, the log viewer, error digest and log health, request and CSP logs, audit alerts and verification, cronjobs, system…
-
Audit alerts Updated Markdown page
The seven alert rules shipped with Exponential's audit trail (brute force, an administrator role granted, settings written out of hours, mass deletes, the audit switched off, a broken chain), who receives them, how to…
-
Audit trail verification Updated Markdown page
How Exponential proves its audit trail was not edited or cut - the hash chain, signed manifests of archives, exp:audit verify and Verify now - how to put verification into monitoring, and what to do when a chain is…
-
Cronjob monitoring Updated Markdown page
Making sure the scheduled jobs of a public-sector Exponential site really run - what depends on them (approvals, audit alerts, notifications, indexing), Setup > Cronjobs with its runs and issues, pauses, the system…
-
CSP reports Updated Markdown page
Collecting Content Security Policy violation reports in csp.log, reading them in the log viewer and error digest, and using them to move a public-sector siteaccess from report-only to an enforced policy without breaking…
-
Error digest and log health Updated Markdown page
The two summary pages of the log viewer - the error digest that groups and counts the last day's distinct errors per log, and log health with disk use, growth, write permissions and rotation settings - and how to use…
-
External uptime monitoring Updated Markdown page
Checking a public website from outside, as citizens reach it - which addresses to check, what counts as healthy, how maintenance windows look to a monitor, certificate expiry, and reporting availability honestly.