Phase 9: backup script + Telegram alerts; add Phase 13 placeholder; fix OpenClaw ANTHROPIC_BASE_URL

PLAN.md

@@ -148,15 +148,11 @@ cloud-monitor/
 37. ~~Auto-deploy on NAS~~ — Done
 38. Rollback: `docker compose pull <previous-tag> && docker compose up -d`
 
-### Phase 9 — Backup & Recovery
-33. Automated daily backup script for:
-    - Gitea DB (pg_dump) + gitea-data
-    - Immich DB + upload data
-    - Navidrome config/DB
-    - OpenClaw data
-    - Dashboard .env and config
-34. Backups stored to `/volume1/backups`
-35. Periodic restore test to verify backups work
+### Phase 9 — Backup & Recovery ✅
+33. ~~Automated daily backup script~~ — Done (Gitea DB, Immich DB, Gitea dump, docker configs + Vaultwarden, Paperless, n8n, Audiobookshelf, Calibre-web)
+34. ~~Backups stored to `/volume1/backups`~~ — Done (7-day retention)
+35. ~~Telegram failure alerts~~ — Done (sources creds from nas-dashboard .env)
+36. Periodic restore test to verify backups work
 
 ### Phase 10 — Monitoring & Alerts (partial)
 36. ~~Add system stats to dashboard overview: CPU, RAM, disk usage~~ — Done
@@ -174,6 +170,11 @@ cloud-monitor/
 44. Deploy Watchtower for auto-updates — Done (internal, no sidebar link needed)
 45. Deploy Speedtest on port 8080 — Done, already in dashboard sidebar
 
+### Phase 13 — Off-site Backup
+46. Add cloud backup (OneDrive or Google Drive) for critical data
+47. Encrypt backups before upload
+48. Retention policy for cloud copies
+
 ## Media Paths
 
 - Music: `/volume1/music` (70GB, FLAC/WAV/DSD/ALAC)