3 endpoints: - POST /api/v1/disaster/backup — complete snapshot (services, config, credentials, Caddyfile, DNS creds, themes, logo, favicon) as downloadable JSON with SHA-256 checksum - POST /api/v1/disaster/restore — restore from uploaded snapshot with checksum verification - GET /api/v1/disaster/status — last backup/restore status Checksum verification prevents restoring corrupted snapshots. Partial restore mode continues on per-file errors. 1633 tests pass.