A bit was missing from the documentation on disaster recovery, the reset of the advertised peer urls for the node recovered from backup. Without that, any subsequent server joining the cluster would not be able to speak to the first node.