Restic Backup Server VPS Offshore
restic is the gold standard for encrypted incremental backup in 2026. Pair it with a private rest-server on AnubizHost offshore VPS and you get a fully self hosted backup target with no upload limits, no per GB fees, and no third party access to your data. Encrypted client side before the bytes leave your machine, stored on NVMe in Romania, Iceland, or Finland, paid for in Bitcoin or Monero.
Need this done for your project?
We implement, you ship. Async, documented, done in days.
Why restic and rest-server
restic encrypts every chunk with AES-256 before it leaves the client. The server side never sees plaintext, never sees file names, and never sees the directory tree. Deduplication happens on the encrypted stream so a repository serving multiple machines compresses naturally. Snapshots are immutable in the sense that pruning is a deliberate, audited operation. Append only mode prevents ransomware on the client from deleting historical snapshots.
rest-server is the official HTTP backend, written in Go, single binary, supports multi user repositories with append only flags per user. It runs comfortably on a 1 vCPU 1 GB VPS for personal use and scales to 4 vCPU 8 GB for small teams. Pair it with Caddy or Nginx for automatic TLS and HTTP basic auth or client certificates for the access layer.
Deploy in 15 Minutes
Provision an AnubizHost VPS with at least 500 GB NVMe. Install Docker and pull restic/rest-server. Mount a data volume on the disk, set REST_USER and REST_PASSWORD via environment, expose port 8000 behind Caddy with automatic TLS. On every client run restic init to create the repository, then restic backup with a cron or systemd timer. Set forget and prune policies to retain 7 daily, 4 weekly, 12 monthly snapshots.
Enable append only mode for clients that should not be able to delete history - this protects against ransomware that steals the repository password. Prune from a separate maintenance host that holds the full credentials. Monitor repository size, snapshot count, and last successful backup timestamp with Prometheus and Grafana or a simple healthchecks.io ping.
Cost Comparison vs Managed Services
Backblaze B2 charges $6 per TB per month with $10 per TB egress. AWS S3 Standard charges $23 per TB plus aggressive egress. Wasabi flat rates at $7 per TB with 90 day minimum retention. AnubizHost VPS with 1 TB NVMe runs flat regardless of egress or retention policy. Above 500 GB self hosted restic wins on raw cost within the first month, and above 2 TB the gap widens dramatically.
Beyond cost the self hosted path removes the vendor as a trust party. Backblaze, AWS, and Wasabi can all be served legal process that forces them to freeze or hand over the encrypted blobs. AnubizHost offshore jurisdiction makes that legal route impractical, and client side encryption means even compelled access yields ciphertext.
Related Services
Why Anubiz Host
Ready to get started?
Skip the research. Tell us what you need, and we'll scope it, implement it, and hand it back — fully documented and production-ready.