Main /

Backup with Borg, Borgmatic and Borgbase

1. Set up keys so that the servers can talk to each other

Log inn with root:

- ssh-keygen -t ed25519 -a 100

- copy id_ed25519.pub to Borgbase (backupserver authorized_keys file)

2. Install Borg

apt install borgbackup see also https://borgbackup.readthedocs.io/en/stable/installation.html

3. Install Borgmatic

The package install apt install borgmatic is outdated, better via pip3, but first install Python

sudo apt install python3-pip

then

sudo pip3 install --upgrade borgmatic

The next step is to ensure that borgmatic's commands available are on your system PATH, so that you can run borgmatic:

echo export 'PATH="$PATH:/root/.local/bin"' >> ~/.bashrc

source ~/.bashrc

4. Create standard config

sudo generate-borgmatic-config

5. Set up encryption and password

borg init -e repokey-blake2 ssh://XXXX.repo.borgbase.com/./repo

6. Edit config.yml

The sample configuration file is located at /etc/borgmatic/config.yaml

Working config with databases



# Updated ~/.config/borgmatic/config.yaml
location:
    source_directories:
        - /var/www
        #- ~/Documents
        #- ~/Pictures

    # one_file_system: true

    repositories:
        - ssh://XXXXXXXX.repo.borgbase.com/./repo

    exclude_caches: true

storage:
    compression: auto,zstd
    encryption_passphrase: XXXXXXXXX
    archive_name_format: '{hostname}-{now}'
    # Number of times to retry a failing backup
    # Needs recent Borgmatic version
    retries: 5
    retry_wait: 5
    unknown_unencrypted_repo_access_is_ok: true

retention:
    keep_daily: 3
    keep_weekly: 4
    keep_monthly: 12

consistency:
    checks:
      - disabled
      # Uncomment to regularly read all repo data
      # Needs recent Borgmatic version
      # - name: repository
      #   frequency: 4 weeks
      # - name: archives
      #   frequency: 8 weeks

    check_last: 3


hooks:
   # postgresql_databases:
   #     - name: all
    mysql_databases:
        - name: all
          format: sql

doublecheck config:

sudo validate-borgmatic-config

7. Start backup

sudo borgmatic create --verbosity 1 --list --stats

8. Check the backups

sudo borgmatic list

sudo borgmatic info

Check databases

sudo borgmatic list --archive latest --find .borgmatic/*_databases

Search for a file

sudo borgmatic list --find security.txt

9. Set up cron