BorgBackup Encrypted Offsite from Anubiz VPS
Borg is the other top-tier backup tool alongside restic. It works particularly well when you control both ends - source VPS and remote borg server. Append-only mode prevents a compromised source from deleting backups, which restic does not enforce as strictly. This guide assumes you have a remote borg server (could be a second Anubiz VPS in a different jurisdiction).
Need this done for your project?
We implement, you ship. Async, documented, done in days.
Step 1: Install Both Sides
apt install borgbackup on source and target.
Step 2: SSH and Repo
From source create SSH key dedicated to borg, push to target's ~/.ssh/authorized_keys with command="borg serve --append-only --restrict-to-path /srv/borg/vps1". borg init --encryption=repokey-blake2 ssh://borg@target/srv/borg/vps1.
Step 3: First Backup
borg create --stats --compression zstd,9 ssh://borg@target/srv/borg/vps1::vps1-{now} /etc /home /var/www.
Step 4: Retention
From source: borg prune --keep-daily 7 --keep-weekly 4 --keep-monthly 6 ssh://borg@target/srv/borg/vps1. Append-only means the actual delete happens only via borg compact run on the target with separate key.
Step 5: Test Restore
borg extract ssh://borg@target/srv/borg/vps1::vps1-2026-06-01 on a test box. Monthly.
Related Services
Why Anubiz Host
Ready to get started?
Skip the research. Tell us what you need, and we'll scope it, implement it, and hand it back — fully documented and production-ready.