[{"data":1,"prerenderedAt":119},["ShallowReactive",2],{"seo-verification":3,"blog-sauvegardes-restic-vps-en":6},{"google":4,"bing":5},"EycwPY2XMyTkVzas3n1ygeNJFGAH513qrMjfDljzsMQ","",{"id":7,"slug":8,"title":9,"excerpt":10,"readTime":11,"views":12,"isPinned":13,"publishedAt":14,"category":15,"categories":21,"featuredImage":23,"bgImage":24,"posterImage":25,"relatedSolution":26,"intro":29,"sections":30,"ctaTitle":73,"ctaBody":74,"ctaButton":75,"ctaUrl":76,"relatedPosts":77},113,"sauvegardes-restic-vps","Automate Your VPS Backups with Restic","Automate your VPS backups with Restic: encrypted snapshots, deduplication and shipping to S3 or any object backend.",7,781,false,"2026-02-27T00:00:00+00:00",{"id":16,"name":17,"slug":18,"color":19,"icon":20},8,"Security & Monitoring","securite-monitoring","bg-rose-500\u002F10 text-rose-400","security",[22],{"id":16,"name":17,"slug":18,"color":19,"icon":20},null,"\u002Fblog\u002Fcovers\u002Fbg.svg","\u002Fblog\u002Fcovers\u002Fsauvegardes-restic-vps-poster.svg",{"categorySlug":27,"appSlug":28},"securite","restic","A backup that is neither tested nor encrypted is worthless on the day of an incident. Restic combines incremental snapshots, deduplication and end-to-end encryption in a single binary. On your VPS, it becomes the automated safety net for your data, pushed to remote object storage at low cost.",[31,35,45,48,70],{"type":32,"title":33,"body":34},"h2","Why automate your backups with Restic","A VPS often hosts irreplaceable data: databases, Docker volumes, configuration files. Restic meets three key requirements of a sound strategy: encryption (AES-256; the repository is unusable without the password), deduplication (identical blocks are stored only once, which drastically reduces volume and cost), and support for varied backends (S3, Backblaze B2, SFTP, local storage). Self-hosting Restic on the VPS rather than relying on a managed backup service gives you full control of encryption: the key stays with you, and the storage provider sees only opaque blobs. This is the foundation of a serious 3-2-1 strategy.",{"type":36,"title":37,"items":38},"ul","What Restic brings you",[39,40,41,42,43,44],"Client-side AES-256 encryption: the storage backend sees only unreadable data.","Block-level deduplication that greatly reduces the size and cost of successive backups.","Fast incremental snapshots: only new blocks are transferred on each run.","Multiple backends (S3, Backblaze B2, SFTP, rest-server, local) without changing your workflow.","Granular restore: a single file, a folder or an entire snapshot via `restic restore`.","Automated retention policy with `forget --prune` (keep N daily, M weekly...).",{"type":32,"title":46,"body":47},"Prerequisites for this deployment","Restic is frugal: it runs on any VPS, including 1 vCPU and 1 GB of RAM, with deduplication consuming a little memory in proportion to the repository size. You need the `restic` binary (the distribution's package or a direct download), a remote destination backend (an S3-compatible bucket at a provider, or another server over SFTP) and its credentials. No Docker required here: Restic is a command-line tool. Plan for `cron` or a systemd timer for automation, and a safe location outside the VPS to keep the repository password.",{"type":49,"title":50,"steps":51},"steps","Set up automated Restic backups",[52,55,58,61,64,67],{"title":53,"body":54},"Install Restic and prepare the environment variables","Install the binary (`apt install restic` then `restic self-update`). Create a `\u002Froot\u002F.restic-env` file containing `RESTIC_REPOSITORY`, `RESTIC_PASSWORD` and the backend access keys (`AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY` for an S3-compatible bucket). Restrict its permissions with `chmod 600`.",{"title":56,"body":57},"Initialize the encrypted repository","Load the environment then run `restic init`. This command creates the repository structure and seals the encryption with your password. Back up this password somewhere other than the VPS: without it, no restore is possible.",{"title":59,"body":60},"Run a first backup","Back up your critical directories, for example `restic backup \u002Fetc \u002Fvar\u002Fwww \u002Fopt\u002Fdocker-data`. For a database, dump it to a file and include that, or pipe the dump into `restic backup --stdin`.",{"title":62,"body":63},"Define a retention policy","Avoid endless accumulation with `restic forget --keep-daily 7 --keep-weekly 4 --keep-monthly 6 --prune`. The `--prune` pass physically deletes blocks that have become orphaned and frees space in the backend.",{"title":65,"body":66},"Automate via cron or a systemd timer","Create a `backup.sh` script that sources `.restic-env`, runs `restic backup` then `restic forget --prune`, and logs the result. Schedule it daily, for example `0 3 * * * \u002Froot\u002Fbackup.sh` in the crontab.",{"title":68,"body":69},"Test a restore and verify integrity","An untested backup is an illusion. List the snapshots with `restic snapshots`, restore to a temporary folder (`restic restore latest --target \u002Ftmp\u002Ftest-restore`) and run `restic check` periodically to validate the repository's integrity.",{"type":71,"body":72},"tip","Protect your backups against ransomware by enabling \"append-only\" mode on the backend: deploy a remote `rest-server` with the `--append-only` option, or use an S3 bucket with an IAM policy that forbids deletions. That way, even if your VPS is compromised and the attacker obtains the credentials, they will be unable to erase or encrypt your existing snapshots. Combine this with running `restic forget --prune` from a separate machine that does hold deletion rights.","Secure your data from day one","On a ServOrbit Cloud VPS with a preconfigured template, you install Restic in a few commands and schedule encrypted backups to the object storage of your choice.","Deploy my backup VPS","\u002Fvps-cloud",[78,92,106],{"id":79,"slug":80,"title":81,"excerpt":82,"readTime":83,"views":84,"isPinned":13,"publishedAt":85,"category":86,"categories":87,"featuredImage":23,"bgImage":24,"posterImage":89,"relatedSolution":90},105,"superviser-vps-uptime-kuma","Monitoring your VPS with Uptime Kuma","Deploy Uptime Kuma on your VPS to monitor your sites and services self-hosted, with alerts and a public status page.",6,1520,"2026-03-07T00:00:00+00:00",{"id":16,"name":17,"slug":18,"color":19,"icon":20},[88],{"id":16,"name":17,"slug":18,"color":19,"icon":20},"\u002Fblog\u002Fcovers\u002Fsuperviser-vps-uptime-kuma-poster.svg",{"categorySlug":27,"appSlug":91},"uptime-kuma",{"id":93,"slug":94,"title":95,"excerpt":96,"readTime":97,"views":98,"isPinned":13,"publishedAt":99,"category":100,"categories":101,"featuredImage":23,"bgImage":24,"posterImage":103,"relatedSolution":104},106,"monitoring-vps-grafana-prometheus","VPS Monitoring with Grafana and Prometheus","Set up a Grafana + Prometheus stack on your VPS to collect, store and visualize your system and application metrics.",9,522,"2026-03-06T00:00:00+00:00",{"id":16,"name":17,"slug":18,"color":19,"icon":20},[102],{"id":16,"name":17,"slug":18,"color":19,"icon":20},"\u002Fblog\u002Fcovers\u002Fmonitoring-vps-grafana-prometheus-poster.svg",{"categorySlug":27,"appSlug":105},"grafana",{"id":107,"slug":108,"title":109,"excerpt":110,"readTime":83,"views":111,"isPinned":13,"publishedAt":112,"category":113,"categories":114,"featuredImage":23,"bgImage":24,"posterImage":116,"relatedSolution":117},107,"monitorer-vps-netdata","Monitor your VPS in real time with Netdata","Install Netdata on your VPS for per-second real-time monitoring: thousands of metrics, zero configuration, alerts included.",559,"2026-03-05T00:00:00+00:00",{"id":16,"name":17,"slug":18,"color":19,"icon":20},[115],{"id":16,"name":17,"slug":18,"color":19,"icon":20},"\u002Fblog\u002Fcovers\u002Fmonitorer-vps-netdata-poster.svg",{"categorySlug":27,"appSlug":118},"netdata",1785628460769]