Skip to content
OrbixPanel OrbixPanel Tutorials

Set up encrypted offsite backups

The backup that saves you is the one stored somewhere else — a copy a server fire, a bad deploy, or ransomware can’t reach. OrbixPanel uses restic to send encrypted snapshots to offsite object storage.

Why restic + object storage

  • Encrypted before upload — restic encrypts locally, so the storage provider never sees your data.
  • Deduplicated & incremental — only changed data is uploaded after the first snapshot, so backups are fast and cheap.
  • S3-compatible — works with AWS S3, Backblaze B2, Wasabi, MinIO, and other S3-compatible providers.

Set it up

  1. Create a bucket at your object-storage provider and get its access key, secret, region/endpoint, and bucket name.
  2. In OrbixPanel’s Backups, configure the backup destination with those credentials (the repository URL + access keys).
  3. Set a strong repository password — this encrypts everything. Store it safely and separately: without it, your backups can’t be restored, by anyone.
  4. Schedule backups (daily is a good default; more often for busy databases).

OrbixPanel initializes the repository on first run and then takes incremental snapshots on your schedule.

Back up the whole site

Make sure your backups include both:

  • Files — the site’s web root and any uploads.
  • Databases — a dump of each MySQL/PostgreSQL database.

You need both to restore a working site. For a manual DB dump alongside, see back up a database.

Next

Guard the repository password like a key to a safe — it’s the one thing that can’t be recovered if lost.

Running OrbixPanel? Encrypted, deduplicated offsite backups (restic) are built in. OrbixPanel.com → — the free, self-hosted, AI-powered hosting control panel.