command-snippets/borgmatic-quickguide.md

# borgmatic quickguide

1. ssh-keygen # without passphrase
2. echo 'command="borg serve --restrict-to-repository /home/borgbackup/repos/FQDN",restrict ' $(cat ~/.ssh/id_rsa.pub) | ssh borgbackup@BACKUPHOST -c "cat - >> ~/.ssh/authorized_keys"
3. borg init -e repokey borgbackup@BACKUPHOST:repos/FQDN # you have to enter a PASSPHRASE (`pwgen 24 1`)
4. mkdir -p /etc/borgmatic/
5. /etc/borgmatic/config.yml
```
location:
    source_directories:
        - /etc/
        - /home/
    repositories:
      - borgbackup@BACKUPHOST:repos/FQDN
storage:
  encryption_passphrase: PASSPHRASE
retention:
    keep_daily: 7
    keep_weekly: 4
    keep_monthly: 6
    keep_yearly: 1

```
6. /etc/cron.daily/borgmatic
```
#!/bin/sh
borgmatic
```
7. chmod +x /etc/cron.daily/borgmatic
8. `BACKUPHOST:~$ borg list --format '{archive}{NL}' repos/FQDN` # list backups from backupserver