When a small service uses SQLite in WAL mode and stores encrypted application-state files separately, what is the recommended sequence for producing a consistent, restorable backup while the service remains online?
A possible approach is to create a database copy with SQLite's online backup API, capture the state files under a short application-level lock, and record a shared backup identifier for both sets of files. The encryption key would be backed up separately from the encrypted data.
Is that sequence sufficient, or should the worker pause all state changes until both copies have completed? Are there considerations specific to using the Open Cloud Backup platform for this kind of application-consistent backup?
Platform reference: https://developers.paragon-software.com/open-cloud-backup-platform/