hetzbot-rotate-service

To rotate a Postgres password safely, this Skill automates the credential update on the host, rewrites the service .env file, and performs a controlled restart with post-rotation validation to minimize downtime.

Safely updating Postgres credentials across remote hosts requires per-service rotation with pre-flight safety checks. This Skill executes a rotate.sh script on the designated host and verifies service continuity after applying the new password.

Triggering on-demand Postgres credential rotation involves instructing the agent to rotate the target service on the chosen host, which executes the rotation and rewrites the /srv/<service>/.env file with the new credentials.

Postgres password rotation does not require manual environment file updates. The Skill automatically rewrites the /srv/<service>/.env file with the new credentials and restarts the service to apply the changes.

If rotation encounters issues during a service restart, the Skill's pre-flight checks and post-rotation validation are designed to catch failures, though specific rollback behavior depends on the host's rotate.sh script implementation.

Yes, you can run Postgres password rotation idempotently on a remote host. The Skill supports idempotent runs with pre-flight checks to ensure safe, repeatable credential updates across the service fleet.