Backrest · restic
Backrest · restic: a first setup, important settings, verification, and recovery considerations.
Working directory: ~/homelab/ops/backup. Follow the common setup workflow first. This is a setup note based on the linked documentation, not a copy of my live configuration or a runtime verification of this full stack.
Start here
Complete the runnable restic restore exercise first. Backrest adds a web interface and scheduling around restic. Use its official Compose example only after you understand a repository, snapshot, password, and restore target. Start with a copied test folder.
Settings and data
Persist Backrest configuration and state; mount only the intended source paths, read-only where possible. Put the real backup repository on an independent destination with separate credentials. Set a schedule and retention policy deliberately. Retention can delete older recovery points, so first inspect what a policy would retain.
Check it
Run a manual backup, inspect its completion, and restore to a separate directory. Compare a file, then repeat after a scheduled run. Configure an alert for failure and check that a missed run is noticed as well. A green job is not proof that every necessary directory was included.
When something fails
For repository locks, verify whether a job is still active before using any unlock operation. For missing files, inspect exclusions and mounted source paths. Keep repository passwords and recovery instructions outside the machine being backed up. Database exports need application-specific consistency steps before file backup.