# Backup & Archival

Use Aurora's S3-compatible storage as a durable, offsite backup target.

> Available S3 endpoint: `a-s3.aur.lu` (France, Albi).

## Restic

Modern, deduplicating backup tool with client‑side encryption and fast incremental snapshots. Commonly used for server and workstation backups with reliable point‑in‑time restores.

- Homepage: [Restic](https://restic.net/)
- Docs: [restic.readthedocs.io](https://restic.readthedocs.io/)

```bash
export RESTIC_REPOSITORY=s3:https://a-s3.aur.lu/my-backups/restic
export AWS_ACCESS_KEY_ID=<YOUR_ACCESS_KEY>
export AWS_SECRET_ACCESS_KEY=<YOUR_SECRET_KEY>
export AWS_DEFAULT_REGION=us-east-1

restic init    # one-time
restic backup /data
restic snapshots
restic restore latest --target ./restore
```

Tips: use `--option s3.list-objects-v1=true` for legacy clients if needed; keep `--pack-size` reasonable for egress.

## Duplicati

Encrypted incremental backups with an easy web UI and CLI. Popular for desktops and small servers, supports scheduling, retention policies, and S3‑compatible targets.

- Homepage: [Duplicati](https://www.duplicati.com/)
- Docs: [duplicati.readthedocs.io](https://duplicati.readthedocs.io/)

- Backend: S3 compatible
- Advanced options: `s3-ext-endpointurl=https://{endpoint}`, `s3-ext-forcepathstyle=true`

```bash
duplicati-cli backup s3://my-backups/duplicati   --s3-ext-endpointurl=https://a-s3.aur.lu   --s3-ext-forcepathstyle=true   --aws-access-key-id=<YOUR_ACCESS_KEY>   --aws-secret-access-key=<YOUR_SECRET_KEY>   /data
```

## Borgmatic + rclone

`borgmatic` provides simple, declarative configuration and verification for Borg backups. A common pattern is to keep a local deduplicated Borg repository and push encrypted archives offsite with [rclone](https://docs.aur.lu/docs/s3/tools/rclone) to S3‑compatible storage.

- Borgmatic: [Homepage](https://torsion.org/borgmatic/)
- Borg: [Homepage](https://www.borgbackup.org/) · [Docs](https://borgbackup.readthedocs.io/)
- rclone: [Aurora Setup Guide](https://docs.aur.lu/docs/s3/tools/rclone) · [Homepage](https://rclone.org/) · [Docs](https://rclone.org/docs/)

```yaml title="~/.config/borgmatic/config.yaml"
location:
  source_directories:
    - /data
  repositories:
    - /var/backups/borg
storage:
  encryption_passphrase: <STRONG_PASSPHRASE>
```

```bash
# Define rclone remote (see rclone setup guide)
rclone copy /var/backups/borg aurora:my-backups/borg --s3-endpoint https://a-s3.aur.lu --s3-no-check-bucket --s3-force-path-style
```