Hostík runs 300 Czech shops. Worst outage: a fiber cut plus our failover script failing on a typo. Four hours, during Christmas market season. The technical fix took a week. The trust fix took a quarter.
What worked: a status page updated every 20 minutes even when the update was "still broken, next update 20:00". Customers quoted those updates back to us later as the reason they stayed. Silence is the churn driver, not downtime.
What we changed: status page on separate infrastructure (obviously, in retrospect), runbooks tested by the junior (if only seniors can fail over, you cannot fail over), and a credit policy written before the outage instead of during it.