Drop what someone gave you. We'll work out the rest.
A consistent snapshot of the whole database — every extension's source, every account, every share token. We take one hourly, but those live on the same disk as the database, so they don't survive that disk being lost. Pull a copy before each deploy and keep it somewhere else. Treat the file like a credential, because it is one.