babak

encrypted backups

Backs up local directories, servers over SSH and WordPress sites over FTP. duplicity and GnuPG encrypt each increment, and the report lands in a Matrix room.

A Node script built on zx that drives the duplicity command line. It handles three kinds of source: a local path, a server reached over SSH, and a WordPress site pulled over FTP. Every increment is encrypted with a GnuPG key.

Retention is a grandfather policy. It keeps today, yesterday, the day before, and the last three Sundays, then prunes everything else. When a run ends it posts to a Matrix room over an Olm-encrypted session, so a backup that stops working does not stay quiet about it.

Source code

All projects