Restic Encrypted Backups on an Anubiz VPS
Restic encrypts data client-side before pushing to S3-style storage. On an Anubiz VPS this is the right choice for offsite encrypted backups - your hosting provider, the storage provider and a hostile process on the box all see only ciphertext. This guide configures restic against Backblaze B2 or Wasabi, sets a retention policy and walks through the restore test that everybody skips.
Need this done for your project?
We implement, you ship. Async, documented, done in days.
Step 1: Install
apt install restic. Confirm version 0.16+.
Step 2: B2 Repository
Create a B2 bucket. App key with bucket-scoped access. export B2_ACCOUNT_ID=..., export B2_ACCOUNT_KEY=..., export RESTIC_REPOSITORY=b2:bucket-name:/anubiz-vps1, export RESTIC_PASSWORD_FILE=/root/.restic-pass. restic init.
Step 3: First Backup
restic backup /etc /home /var/www /var/lib/postgresql. First run is full; later runs are incremental.
Step 4: Cron and Retention
Nightly cron: backup, then restic forget --prune --keep-daily 7 --keep-weekly 4 --keep-monthly 6.
Step 5: Restore Test
Monthly: spin up a fresh test VPS, restic restore latest --target /tmp/restore, verify the restore can boot the service. Untested backups do not exist.
Related Services
Why Anubiz Host
Ready to get started?
Skip the research. Tell us what you need, and we'll scope it, implement it, and hand it back — fully documented and production-ready.