What I forgot to move and regretted

Migrated from Leaseweb to Hetzner last month. Thought I had everything. I did not.

Forgot:

• ZFS pool auto-import flag on new host. Pool didn't mount on first reboot. 2 hours panic.
• Custom smartd.conf with disk-specific thresholds. New server started screaming about reallocated sectors that were already known.
• Backup rotation scripts in /usr/local/bin, not in package. 3 days of missing incremental backups before I noticed.
• SPF include for monitoring subdomain. Mail bounced for a week.

For that money you get new hardware but you don't get your brain back. What did you forget? Let's build checklist.

Oh very bad feeling when hos not boot a

I forget ssl certificate for internal api very cheap to replace but time to find out why service down I spend 3 hour

Also cron job for database dump I make custom path and forget copy script a

Always check cron and certificate when migrate a

Article 17 (formerly 13) compliance documentation. I migrated in January and discovered my DPO contact forms were hardcoded with old provider's mail server. GDPR processing records referenced Leaseweb subprocessor agreement that had expired.

Also: cookie consent geo-rules. Hetzner's anycast routed EU users through US PoP briefly. Consent banner loaded US version. Violation? Arguably yes. I now maintain article 30 table with provider-specific technical controls. Earnest recommendation: include compliance artifacts in migration checklist.

I always forget the ssh keys for deployment wey.

And the firewall rules in iptables-persistent not in etc like normal people wey?

Also custom systemd units for my app wey I put in etc systemd system and forget copy

Double fail!

Direct additions:

• MTU settings on GRE tunnels. Default 1500, provider X uses 1462. Silent breakage.
• SNMP community strings in monitoring. Obvious but missed.
• BIOS boot order for IP-KVM. Remote reinstall impossible without.
• As said: reverse DNS delegation records at registrar, not host.

To be honest: I keep ansible playbook now. One command, entire state. Dry run before every migration. Learned after forgetting BIND zone transfers allowed-ips.