Technology +
Server

Backup and restoration

Backups are performed daily at night and are retained for 14 days. The backup location is geographically separate from the website. Additionally, we store backups of each website for a longer period on our internal servers in Imst. Individual files can be restored. Restoration is carried out by Cookis GmbH.

Availability

We guarantee an infrastructure availability of 99.45 % on an annual average. In the event of any disruption, we ensure that downtime does not exceed 24 hours. This does not apply to disruptions where the server cluster is unreachable due to technical or other issues outside the control of Cookis GmbH (force majeure, third-party fault, natural disasters, etc.).

Maintenance window

Maintenance of the servers and the installation of major releases takes place once or twice a year during the night between 00:00 and 04:00. A downtime of approximately one hour is to be expected. Smaller critical updates with a downtime in the single-digit seconds range may also occur outside this window. We reserve the right to reschedule the maintenance window if bugs or security vulnerabilities are identified that threaten the stability and integrity of the infrastructure and require prompt intervention.

Monitoring

The servers and their functions are monitored 24/7 by us and the company Mynet. If anomalies are detected, a maintenance chain is initiated. In addition, the websites are accessed from an external source at regular intervals and evaluated to identify any connection issues.

Access and connectivity

Access is possible via FTP and SFTP to the respective projects. Restricted SSH access with the rights of the respective project can be set up. Root access is only provided when using a dedicated server. Sharing access credentials with third parties without prior consultation with Cookis GmbH is prohibited.

To use the service, the customer must utilise third-party services, in particular the services of an internet provider. Any warranty or liability of Cookis GmbH for inadequate or faulty usability of the software, which is attributable to third parties, is excluded.

Components and software versions used

We use software packages from the Ubuntu repository (Canonical). We operate on the current patch level of a supported LTS version. In addition, we use TYPO3 in the LTS version, for which we regularly deliver updates. We provide the software updates for Bakehouse.

Protection of servers and online projects

The servers are protected, among other things, by up-to-date software versions as well as a firewall. The setup on a cluster allows load peaks to be distributed across powerful hardware. Continuous monitoring of the servers enables any anomalies to be detected and resolved.
The hosting and all provided components are designed for running the Bakehouse software. To avoid compromising the security of our infrastructure, hosting of scripts not created by Cookis GmbH on the same webspace is prohibited.

Both Cookis and Mynet test the server and the hosted websites at least once a year using tools to identify known vulnerabilities.

24/7 monitoring

All servers, micro-services and projects are included in our business-grade monitoring. This is done via an external technical infrastructure to ensure that employees on call can be notified even in the event of a total failure. The action chain is automatically triggered internally.

If a DDoS attack is detected via the monitoring system, the company Cookis GmbH can, together with the server technicians from Mynet GmbH, block individual IP addresses or websites.