command-snippets/borgmatic-quickguide.md

borgmatic quickguide

1. ssh-keygen # without passphrase
2. echo 'command="borg serve --restrict-to-repository /home/borgbackup/repos/FQDN",restrict ' $(cat ~/.ssh/id_rsa.pub) |ssh borgbackup@BACKUPHOST -c "cat - >> ~/.ssh/authorized_keys"
3. borg init -e repokey borgbackup@BACKUPHOST:repos/FQDN # you have to enter a PASSPHRASE (pwgen 24 1)
4. mkdir -p /etc/borgmatic/
5. /etc/borgmatic/config.yml

location:
    source_directories:
        - /etc/
        - /home/
    repositories:
      - borgbackup@BACKUPHOST:repos/FQDN
storage:
  encryption_passphrase: PASSPHRASE
retention:
    keep_daily: 7
    keep_weekly: 4
    keep_monthly: 6
    keep_yearly: 1

6. /etc/cron.daily/borgmatic

#!/bin/sh
borgmatic

7. chmod +x /etc/cron.daily/borgmatic
8. BACKUPHOST:~$ borg list --format '{archive}{NL}' repos/FQDN # list backups from backupserver