The decision
Separate repository access, encryption password and recovery instructions so a server loss does not remove every recovery route.
A bounded example
Restore to an isolated target and check the application, not merely the presence of files. Keep secrets out of shell history and operating notes.
Documentation
Use the relevant version of restic — Restore before changing a live service.
Checks before change
Keep a recovery route, work on an isolated copy when data is affected, and record observations rather than assumptions. Stop if an acceptance check fails.
Limits
Hoszen does not preinstall or operate applications, hold secrets, verify backups, promise capacity or confirm a payment or VPS delivery.