Backup & Archival
Use Aurora's S3-compatible storage as a durable, offsite backup target.
Restic
Modern, deduplicating backup tool with client‑side encryption and fast incremental snapshots. Commonly used for server and workstation backups with reliable point‑in‑time restores.
- Homepage: Restic
- Docs: restic.readthedocs.io
export RESTIC_REPOSITORY=s3:https:///my-backups/restic
export AWS_ACCESS_KEY_ID=<YOUR_ACCESS_KEY>
export AWS_SECRET_ACCESS_KEY=<YOUR_SECRET_KEY>
export AWS_DEFAULT_REGION=us-east-1
restic init # one-time
restic backup /data
restic snapshots
restic restore latest --target ./restore
Tips: use --option s3.list-objects-v1=true for legacy clients if needed; keep --pack-size reasonable for egress.
Duplicati
Encrypted incremental backups with an easy web UI and CLI. Popular for desktops and small servers, supports scheduling, retention policies, and S3‑compatible targets.
-
Homepage: Duplicati
-
Docs: duplicati.readthedocs.io
-
Backend: S3 compatible
-
Advanced options:
s3-ext-endpointurl=https://{endpoint},s3-ext-forcepathstyle=true
duplicati-cli backup s3://my-backups/duplicati --s3-ext-endpointurl=https:// --s3-ext-forcepathstyle=true --aws-access-key-id=<YOUR_ACCESS_KEY> --aws-secret-access-key=<YOUR_SECRET_KEY> /data
Borgmatic + rclone
borgmatic provides simple, declarative configuration and verification for Borg backups. A common pattern is to keep a local deduplicated Borg repository and push encrypted archives offsite with rclone to S3‑compatible storage.
location:
source_directories:
- /data
repositories:
- /var/backups/borg
storage:
encryption_passphrase: <STRONG_PASSPHRASE>
# Define rclone remote (see rclone setup guide)
rclone copy /var/backups/borg aurora:my-backups/borg --s3-endpoint https:// --s3-no-check-bucket --s3-force-path-style