← InfrastructureBackup
Backup Strategy
Automated daily backups protect all BasicStack data with encrypted storage, retention policies, and regular restore testing to ensure data can be recovered.
Backup Schedule
- Frequency: Daily automated backups at 02:00 UTC
- Retention: 30 daily backups, 12 monthly backups
- Storage Location: Hetzner Cloud Object Storage (S3-compatible)
- Encryption: All backups encrypted with GPG before storage
What We Back Up
- Databases: PostgreSQL logical dumps (pg_dump) for all services
- Persistent Volumes: Snapshots of Kubernetes persistent volume data
- Configuration: Kubernetes manifests and secrets (encrypted)
Backup Verification
We ensure backup integrity through:
- Automated checksum verification after each backup
- Monthly restore tests to a staging environment
- Backup size and completion monitoring with alerts
- Restoration time objective (RTO) testing: <4 hours for full restoration
Access and Security
- Backup access is restricted to authorized operators only
- All backup operations are logged and audited
- Backup encryption keys are stored separately from backup data
- Offsite backup copies stored in a different Hetzner region