[{"data":1,"prerenderedAt":3051},["ShallowReactive",2],{"docs-proxmox-backup-server-s3-offsite":3,"docs-related-proxmox-backup-server-s3-offsite":1313},{"id":4,"title":5,"body":6,"date":1296,"description":1297,"extension":1298,"meta":1299,"navigation":1300,"path":1301,"seo":1302,"sitemap":1303,"stem":1304,"tags":1305,"tool":1306,"__hash__":1312},"docs/docs/proxmox-backup-server-s3-offsite.md","Proxmox Backup Server offsite to S3 — full setup guide",{"type":7,"value":8,"toc":1276},"minimark",[9,22,29,34,72,76,86,93,96,115,122,126,131,134,140,146,150,157,162,167,170,174,177,202,205,209,219,225,302,313,323,333,393,396,412,416,419,452,459,463,476,481,515,540,543,556,559,563,573,576,599,602,606,609,628,640,663,734,737,802,832,839,843,846,849,867,874,882,889,893,900,922,929,932,952,956,959,976,979,983,986,989,1045,1048,1111,1114,1146,1152,1156,1169,1196,1206,1212,1233,1247,1251,1272],[10,11,12,13,17,18,21],"p",{},"Proxmox Backup Server 4.0 (August 2025) introduced native S3 object storage as a datastore backend. This replaces the old pattern of mounting S3 with ",[14,15,16],"code",{},"s3fs-fuse"," or running third-party proxies like ",[14,19,20],{},"pmoxs3backuproxy"," — approaches Proxmox never officially supported. This guide covers both supported deployment patterns, with exact commands and the caveats that matter for production use.",[10,23,24,28],{},[25,26,27],"strong",{},"What you'll configure:"," An S3 endpoint, an S3-backed datastore with local cache, and — optionally — a sync job that keeps a local datastore and an S3 datastore in step for true 3-2-1 backups.",[30,31,33],"h2",{"id":32},"prerequisites","Prerequisites",[35,36,37,45,63,66,69],"ul",{},[38,39,40,41,44],"li",{},"Proxmox Backup Server 4.0 or newer (4.1.6+ recommended). Check with ",[14,42,43],{},"proxmox-backup-manager versions",".",[38,46,47,48,51,52,51,55,58,59,62],{},"An S3-compatible object store with a pre-created bucket and an access key pair with ",[14,49,50],{},"GetObject",", ",[14,53,54],{},"PutObject",[14,56,57],{},"ListBucket",", and ",[14,60,61],{},"DeleteObject"," permissions on that bucket. PBS does not create buckets or manage ACLs.",[38,64,65],{},"A dedicated disk, partition, or ZFS dataset for the local cache. Proxmox recommends 64–128 GiB. Do not reuse an existing PBS datastore path.",[38,67,68],{},"Outbound HTTPS to the S3 endpoint. Plain HTTP is rejected. Self-signed certificates require the TLS fingerprint in config.",[38,70,71],{},"Stable bandwidth to the S3 endpoint. Initial seeding writes a large chunk of your datastore to S3.",[30,73,75],{"id":74},"how-the-s3-backend-actually-works","How the S3 backend actually works",[77,78,79],"blockquote",{},[10,80,81,82,85],{},"⚠️ ",[25,83,84],{},"The S3 datastore backend is marked technology preview in PBS 4.1.6."," It works and is reasonable to use for secondary or offsite copies, but run restore tests frequently and watch the Proxmox release notes before trusting it as your only copy.",[10,87,88,89,92],{},"PBS does not put self-contained snapshots into the bucket. It uses the same ",[25,90,91],{},"content-addressable chunk store"," model it uses locally: each backup is split into deduplicated, compressed, optionally encrypted chunks identified by hash. Those chunks are written to S3 as individual objects, prefixed by the datastore name. Index files that map chunks back to snapshots are also stored as objects.",[10,94,95],{},"Two consequences:",[97,98,99,105],"ol",{},[38,100,101,104],{},[25,102,103],{},"Dedup and compression still work."," You don't pay the S3 storage cost of full copies.",[38,106,107,110,111,114],{},[25,108,109],{},"You cannot restore directly from the bucket."," A PBS instance is always required. The good news: if you lose the PBS host, you can point a fresh PBS install at the same bucket with the same datastore name and ",[14,112,113],{},"--reuse-datastore true --overwrite-in-use true",", and your backups are recoverable.",[10,116,117,118,121],{},"A ",[25,119,120],{},"local cache"," is mandatory. PBS keeps recently-read chunks and index metadata on disk so garbage collection, verification, and reads don't hit S3 for every operation. Without the cache, cost and latency would both be unusable.",[30,123,125],{"id":124},"two-deployment-patterns","Two deployment patterns",[127,128,130],"h3",{"id":129},"pattern-a-s3-as-the-only-datastore","Pattern A — S3 as the only datastore",[10,132,133],{},"PBS writes directly to the S3 datastore. No local chunk storage beyond the cache.",[10,135,136,139],{},[25,137,138],{},"Use when:"," homelab, small deployments, or secondary PBS acting purely as offsite target. Simplest to set up.",[10,141,142,145],{},[25,143,144],{},"Trade-off:"," every backup, restore, verification, and GC operation touches S3. Initial backup speeds are bound by your upstream bandwidth. Restores are bound by downstream.",[127,147,149],{"id":148},"pattern-b-local-datastore-s3-datastore-sync-job","Pattern B — Local datastore + S3 datastore + sync job",[10,151,152,153,156],{},"Backups land on a local datastore first (fast). A scheduled ",[25,154,155],{},"sync job on the same PBS instance"," pulls from local to S3 for offsite retention. You get both copies from one PBS host.",[10,158,159,161],{},[25,160,138],{}," you want backup speed to match local disk throughput and need an automated offsite copy. This is the recommended pattern for MSPs and production use.",[10,163,164,166],{},[25,165,144],{}," more storage required on the PBS host, slightly more complex.",[10,168,169],{},"The rest of this guide sets up the S3 endpoint and datastore once. Both patterns diverge only at the final step (whether you point PVE at the S3 datastore directly, or configure a sync job).",[30,171,173],{"id":172},"step-1-create-the-s3-bucket-and-credentials","Step 1 — Create the S3 bucket and credentials",[10,175,176],{},"At your S3 provider, create:",[35,178,179,185,192],{},[38,180,117,181,184],{},[25,182,183],{},"bucket"," dedicated to PBS. Do not share it with other tools — PBS manages object lifecycle itself.",[38,186,187,188,191],{},"An ",[25,189,190],{},"access key pair"," scoped to that bucket only. Save the secret key; most providers only show it once.",[38,193,194,195,198,199,44],{},"Note the ",[25,196,197],{},"region"," identifier and the ",[25,200,201],{},"endpoint URL",[10,203,204],{},"If your provider supports object versioning or object lock, enable it on the bucket for ransomware protection. PBS never modifies existing chunks, but a compromised client with delete permissions could — versioning gives you a recovery window.",[30,206,208],{"id":207},"step-2-configure-the-s3-endpoint-in-pbs","Step 2 — Configure the S3 endpoint in PBS",[10,210,211,214,215,218],{},[25,212,213],{},"Via the web UI:"," Navigate to ",[25,216,217],{},"Configuration → Remotes → S3 Endpoints → Add",". Fill in name, access key, secret, endpoint URL, region, and (for self-signed providers) fingerprint.",[10,220,221,224],{},[25,222,223],{},"Via CLI"," — this is the pattern most providers use:",[226,227,232],"pre",{"className":228,"code":229,"language":230,"meta":231,"style":231},"language-bash shiki shiki-themes github-light github-dark","proxmox-backup-manager s3 endpoint create my-s3-ep \\\n  --access-key 'YOUR_ACCESS_KEY' \\\n  --secret-key 'YOUR_SECRET_KEY' \\\n  --endpoint '{{bucket}}.s3.{{region}}.example.com' \\\n  --region eu-central-1\n","bash","",[14,233,234,260,271,282,293],{"__ignoreMap":231},[235,236,239,243,247,250,253,256],"span",{"class":237,"line":238},"line",1,[235,240,242],{"class":241},"sScJk","proxmox-backup-manager",[235,244,246],{"class":245},"sZZnC"," s3",[235,248,249],{"class":245}," endpoint",[235,251,252],{"class":245}," create",[235,254,255],{"class":245}," my-s3-ep",[235,257,259],{"class":258},"sj4cs"," \\\n",[235,261,263,266,269],{"class":237,"line":262},2,[235,264,265],{"class":258},"  --access-key",[235,267,268],{"class":245}," 'YOUR_ACCESS_KEY'",[235,270,259],{"class":258},[235,272,274,277,280],{"class":237,"line":273},3,[235,275,276],{"class":258},"  --secret-key",[235,278,279],{"class":245}," 'YOUR_SECRET_KEY'",[235,281,259],{"class":258},[235,283,285,288,291],{"class":237,"line":284},4,[235,286,287],{"class":258},"  --endpoint",[235,289,290],{"class":245}," '{{bucket}}.s3.{{region}}.example.com'",[235,292,259],{"class":258},[235,294,296,299],{"class":237,"line":295},5,[235,297,298],{"class":258},"  --region",[235,300,301],{"class":245}," eu-central-1\n",[10,303,304,305,308,309,312],{},"The ",[14,306,307],{},"{{bucket}}"," and ",[14,310,311],{},"{{region}}"," placeholders are expanded automatically when PBS makes requests. This gives you one endpoint config that works across multiple buckets.",[10,314,315,318,319,322],{},[25,316,317],{},"Vhost vs path style:"," PBS defaults to vhost-style addressing (bucket as subdomain). If your provider requires path-style (bucket in the URL path), add ",[14,320,321],{},"--path-style true",". Cloudflare R2 and some self-hosted providers need this.",[10,324,325,328,329,332],{},[25,326,327],{},"Self-signed certificates:"," Add ",[14,330,331],{},"--fingerprint 'XX:XX:XX:...'",". Get the fingerprint with:",[226,334,336],{"className":228,"code":335,"language":230,"meta":231,"style":231},"openssl s_client -connect your-s3-endpoint:443 -servername your-s3-endpoint \u003C /dev/null 2>/dev/null | \\\n  openssl x509 -fingerprint -sha256 -noout\n",[14,337,338,376],{"__ignoreMap":231},[235,339,340,343,346,349,352,355,358,362,365,368,371,374],{"class":237,"line":238},[235,341,342],{"class":241},"openssl",[235,344,345],{"class":245}," s_client",[235,347,348],{"class":258}," -connect",[235,350,351],{"class":245}," your-s3-endpoint:443",[235,353,354],{"class":258}," -servername",[235,356,357],{"class":245}," your-s3-endpoint",[235,359,361],{"class":360},"szBVR"," \u003C",[235,363,364],{"class":245}," /dev/null",[235,366,367],{"class":360}," 2>",[235,369,370],{"class":245},"/dev/null",[235,372,373],{"class":360}," |",[235,375,259],{"class":258},[235,377,378,381,384,387,390],{"class":237,"line":262},[235,379,380],{"class":241},"  openssl",[235,382,383],{"class":245}," x509",[235,385,386],{"class":258}," -fingerprint",[235,388,389],{"class":258}," -sha256",[235,391,392],{"class":258}," -noout\n",[10,394,395],{},"Verify the endpoint:",[226,397,399],{"className":228,"code":398,"language":230,"meta":231,"style":231},"proxmox-backup-manager s3 endpoint list\n",[14,400,401],{"__ignoreMap":231},[235,402,403,405,407,409],{"class":237,"line":238},[235,404,242],{"class":241},[235,406,246],{"class":245},[235,408,249],{"class":245},[235,410,411],{"class":245}," list\n",[30,413,415],{"id":414},"step-3-prepare-the-local-cache","Step 3 — Prepare the local cache",[10,417,418],{},"The cache must live on a dedicated path. A ZFS dataset with a quota is the cleanest option:",[226,420,422],{"className":228,"code":421,"language":230,"meta":231,"style":231},"zfs create -o mountpoint=/mnt/datastore/s3-cache rpool/s3-cache\nzfs set quota=128G rpool/s3-cache\n",[14,423,424,440],{"__ignoreMap":231},[235,425,426,429,431,434,437],{"class":237,"line":238},[235,427,428],{"class":241},"zfs",[235,430,252],{"class":245},[235,432,433],{"class":258}," -o",[235,435,436],{"class":245}," mountpoint=/mnt/datastore/s3-cache",[235,438,439],{"class":245}," rpool/s3-cache\n",[235,441,442,444,447,450],{"class":237,"line":262},[235,443,428],{"class":241},[235,445,446],{"class":245}," set",[235,448,449],{"class":245}," quota=128G",[235,451,439],{"class":245},[10,453,454,455,458],{},"Or use a dedicated partition mounted at ",[14,456,457],{},"/mnt/datastore/s3-cache",". Whatever you choose, do not use an existing datastore path — PBS will reject it.",[30,460,462],{"id":461},"step-4-create-the-s3-backed-datastore","Step 4 — Create the S3-backed datastore",[10,464,465,467,468,471,472,475],{},[25,466,213],{}," ",[25,469,470],{},"Datastore → Add Datastore",", select ",[25,473,474],{},"S3"," as backend, pick your endpoint from the dropdown, set bucket name and cache path.",[10,477,478],{},[25,479,480],{},"Via CLI:",[226,482,484],{"className":228,"code":483,"language":230,"meta":231,"style":231},"proxmox-backup-manager datastore create s3-offsite \\\n  /mnt/datastore/s3-cache \\\n  --backend type=s3,client=my-s3-ep,bucket=pbs-offsite-bucket\n",[14,485,486,500,507],{"__ignoreMap":231},[235,487,488,490,493,495,498],{"class":237,"line":238},[235,489,242],{"class":241},[235,491,492],{"class":245}," datastore",[235,494,252],{"class":245},[235,496,497],{"class":245}," s3-offsite",[235,499,259],{"class":258},[235,501,502,505],{"class":237,"line":262},[235,503,504],{"class":245},"  /mnt/datastore/s3-cache",[235,506,259],{"class":258},[235,508,509,512],{"class":237,"line":273},[235,510,511],{"class":258},"  --backend",[235,513,514],{"class":245}," type=s3,client=my-s3-ep,bucket=pbs-offsite-bucket\n",[35,516,517,523,528,534],{},[38,518,519,522],{},[14,520,521],{},"s3-offsite"," is the datastore name. It becomes the prefix for all objects in the bucket, so pick something stable — renaming later means reseeding.",[38,524,525,527],{},[14,526,457],{}," is the local cache path.",[38,529,530,533],{},[14,531,532],{},"client=my-s3-ep"," references the endpoint you created in Step 2.",[38,535,536,539],{},[14,537,538],{},"bucket=pbs-offsite-bucket"," is the S3 bucket name.",[10,541,542],{},"List datastores to confirm:",[226,544,546],{"className":228,"code":545,"language":230,"meta":231,"style":231},"proxmox-backup-manager datastore list\n",[14,547,548],{"__ignoreMap":231},[235,549,550,552,554],{"class":237,"line":238},[235,551,242],{"class":241},[235,553,492],{"class":245},[235,555,411],{"class":245},[10,557,558],{},"The datastore is now usable. At this point your config diverges depending on pattern.",[30,560,562],{"id":561},"pattern-a-use-s3-datastore-directly-from-pve","Pattern A — Use S3 datastore directly from PVE",[10,564,565,566,569,570,572],{},"In Proxmox VE: ",[25,567,568],{},"Datacenter → Storage → Add → Proxmox Backup Server",". Enter your PBS IP/hostname, credentials, the datastore name (",[14,571,521],{},"), and the PBS server fingerprint.",[10,574,575],{},"Get the PBS fingerprint:",[226,577,579],{"className":228,"code":578,"language":230,"meta":231,"style":231},"proxmox-backup-manager cert info | grep Fingerprint\n",[14,580,581],{"__ignoreMap":231},[235,582,583,585,588,591,593,596],{"class":237,"line":238},[235,584,242],{"class":241},[235,586,587],{"class":245}," cert",[235,589,590],{"class":245}," info",[235,592,373],{"class":360},[235,594,595],{"class":241}," grep",[235,597,598],{"class":245}," Fingerprint\n",[10,600,601],{},"Backup jobs in PVE that target this storage now write directly to S3 via the PBS local cache.",[30,603,605],{"id":604},"pattern-b-local-datastore-sync-job-to-s3","Pattern B — Local datastore + sync job to S3",[10,607,608],{},"Create a local datastore alongside the S3 one (if you don't already have one):",[226,610,612],{"className":228,"code":611,"language":230,"meta":231,"style":231},"proxmox-backup-manager datastore create local-pbs /mnt/datastore/local-pbs\n",[14,613,614],{"__ignoreMap":231},[235,615,616,618,620,622,625],{"class":237,"line":238},[235,617,242],{"class":241},[235,619,492],{"class":245},[235,621,252],{"class":245},[235,623,624],{"class":245}," local-pbs",[235,626,627],{"class":245}," /mnt/datastore/local-pbs\n",[10,629,630,631,634,635,637,638,44],{},"Point your PVE backup jobs at ",[14,632,633],{},"local-pbs",". Now configure a pull sync job that mirrors snapshots from ",[14,636,633],{}," into ",[14,639,521],{},[10,641,642,643,646,647,650,651,654,655,658,659,662],{},"PBS sync jobs are designed to pull from a ",[25,644,645],{},"Remote"," (another PBS instance). To sync between two datastores on the same PBS host, the supported approach is to create a Remote that points back at ",[14,648,649],{},"localhost",". Create a dedicated API token for the sync user first (",[25,652,653],{},"Configuration → Access Control → API Token",", role ",[14,656,657],{},"DatastoreReader"," on ",[14,660,661],{},"/datastore/local-pbs","), then:",[226,664,666],{"className":228,"code":665,"language":230,"meta":231,"style":231},"proxmox-backup-manager remote create self \\\n  --host 127.0.0.1 \\\n  --userid 'sync@pbs!syncjob' \\\n  --password 'YOUR_API_TOKEN_SECRET' \\\n  --fingerprint \"$(proxmox-backup-manager cert info | awk '/Fingerprint/ {print $3}')\"\n",[14,667,668,682,692,702,712],{"__ignoreMap":231},[235,669,670,672,675,677,680],{"class":237,"line":238},[235,671,242],{"class":241},[235,673,674],{"class":245}," remote",[235,676,252],{"class":245},[235,678,679],{"class":245}," self",[235,681,259],{"class":258},[235,683,684,687,690],{"class":237,"line":262},[235,685,686],{"class":258},"  --host",[235,688,689],{"class":258}," 127.0.0.1",[235,691,259],{"class":258},[235,693,694,697,700],{"class":237,"line":273},[235,695,696],{"class":258},"  --userid",[235,698,699],{"class":245}," 'sync@pbs!syncjob'",[235,701,259],{"class":258},[235,703,704,707,710],{"class":237,"line":284},[235,705,706],{"class":258},"  --password",[235,708,709],{"class":245}," 'YOUR_API_TOKEN_SECRET'",[235,711,259],{"class":258},[235,713,714,717,720,722,725,728,731],{"class":237,"line":295},[235,715,716],{"class":258},"  --fingerprint",[235,718,719],{"class":245}," \"$(",[235,721,242],{"class":241},[235,723,724],{"class":245}," cert info ",[235,726,727],{"class":360},"|",[235,729,730],{"class":241}," awk",[235,732,733],{"class":245}," '/Fingerprint/ {print $3}')\"\n",[10,735,736],{},"Then create the sync job from the local datastore (via the self-remote) into the S3 datastore:",[226,738,740],{"className":228,"code":739,"language":230,"meta":231,"style":231},"proxmox-backup-manager sync-job create offsite-sync \\\n  --remote self \\\n  --remote-store local-pbs \\\n  --store s3-offsite \\\n  --schedule 'daily' \\\n  --remove-vanished false\n",[14,741,742,756,765,774,783,793],{"__ignoreMap":231},[235,743,744,746,749,751,754],{"class":237,"line":238},[235,745,242],{"class":241},[235,747,748],{"class":245}," sync-job",[235,750,252],{"class":245},[235,752,753],{"class":245}," offsite-sync",[235,755,259],{"class":258},[235,757,758,761,763],{"class":237,"line":262},[235,759,760],{"class":258},"  --remote",[235,762,679],{"class":245},[235,764,259],{"class":258},[235,766,767,770,772],{"class":237,"line":273},[235,768,769],{"class":258},"  --remote-store",[235,771,624],{"class":245},[235,773,259],{"class":258},[235,775,776,779,781],{"class":237,"line":284},[235,777,778],{"class":258},"  --store",[235,780,497],{"class":245},[235,782,259],{"class":258},[235,784,785,788,791],{"class":237,"line":295},[235,786,787],{"class":258},"  --schedule",[235,789,790],{"class":245}," 'daily'",[235,792,259],{"class":258},[235,794,796,799],{"class":237,"line":795},6,[235,797,798],{"class":258},"  --remove-vanished",[235,800,801],{"class":258}," false\n",[35,803,804,810,816,822],{},[38,805,806,809],{},[14,807,808],{},"--remote self"," references the loopback remote you just created.",[38,811,812,815],{},[14,813,814],{},"--remote-store local-pbs"," is the source datastore.",[38,817,818,821],{},[14,819,820],{},"--store s3-offsite"," is the target (S3) datastore.",[38,823,824,827,828,831],{},[14,825,826],{},"--remove-vanished false"," is a ",[25,829,830],{},"ransomware safety measure",": if an attacker deletes snapshots on your local datastore, the sync job won't propagate those deletions to S3. Manage retention directly on the S3 datastore with a separate prune job.",[10,833,834,835,838],{},"You can also configure all of this from the web UI under ",[25,836,837],{},"Datastore → s3-offsite → Sync Jobs → Add"," after the self-remote is in place — often the faster path for first-time setup.",[30,840,842],{"id":841},"step-5-encryption-do-not-skip","Step 5 — Encryption (do not skip)",[10,844,845],{},"PBS supports client-side encryption. Chunks are encrypted on the PVE host before being sent to PBS — your S3 provider only ever sees ciphertext. This is independent of the bucket being public-accessible or not; correctly configured, a compromised bucket leaks nothing useful.",[10,847,848],{},"On each PVE node:",[226,850,852],{"className":228,"code":851,"language":230,"meta":231,"style":231},"proxmox-backup-client key create /etc/pve/priv/pbs-encryption.key\n",[14,853,854],{"__ignoreMap":231},[235,855,856,859,862,864],{"class":237,"line":238},[235,857,858],{"class":241},"proxmox-backup-client",[235,860,861],{"class":245}," key",[235,863,252],{"class":245},[235,865,866],{"class":245}," /etc/pve/priv/pbs-encryption.key\n",[10,868,869,870,873],{},"Reference the key in your storage config in PVE (",[25,871,872],{},"Datacenter → Storage → your PBS storage → Encryption Key","). All subsequent backups are encrypted.",[77,875,876],{},[10,877,81,878,881],{},[25,879,880],{},"Back up the encryption key separately — not on PBS, not in the S3 bucket it protects."," If you lose the key, every backup in S3 is unrecoverable. Print the paper-key version and store it in a safe, or keep it in a password manager that is not itself backed up to the same PBS.",[10,883,884,885,888],{},"Use the master-key feature (",[14,886,887],{},"--master-pubkey-file",") to allow recovery of individual backup keys from a master keypair. The Proxmox Backup Client documentation covers the master-key workflow in detail.",[30,890,892],{"id":891},"step-6-garbage-collection-and-verification-on-s3","Step 6 — Garbage collection and verification on S3",[10,894,895,896,899],{},"GC on an S3-backed datastore issues significantly more API requests than GC on local storage. Schedule it ",[25,897,898],{},"less frequently"," than you would locally — weekly is reasonable for most workloads, not daily.",[226,901,903],{"className":228,"code":902,"language":230,"meta":231,"style":231},"proxmox-backup-manager datastore update s3-offsite --gc-schedule 'Sun 04:00'\n",[14,904,905],{"__ignoreMap":231},[235,906,907,909,911,914,916,919],{"class":237,"line":238},[235,908,242],{"class":241},[235,910,492],{"class":245},[235,912,913],{"class":245}," update",[235,915,497],{"class":245},[235,917,918],{"class":258}," --gc-schedule",[235,920,921],{"class":245}," 'Sun 04:00'\n",[10,923,924,925,928],{},"Verification jobs read chunks back and recompute their hashes. On S3 this means downloading chunks — egress cost applies unless your provider offers zero-egress. Configure verify jobs from the web UI under ",[25,926,927],{},"Datastore → Verify Jobs → Add"," with a conservative schedule (monthly is a reasonable starting point for S3 datastores). Enable the \"skip verified\" option with a 30-day window so verification is incremental rather than full.",[10,930,931],{},"Manual verification is also possible from the CLI:",[226,933,935],{"className":228,"code":934,"language":230,"meta":231,"style":231},"proxmox-backup-manager verify s3-offsite --ignore-verified true\n",[14,936,937],{"__ignoreMap":231},[235,938,939,941,944,946,949],{"class":237,"line":238},[235,940,242],{"class":241},[235,942,943],{"class":245}," verify",[235,945,497],{"class":245},[235,947,948],{"class":258}," --ignore-verified",[235,950,951],{"class":258}," true\n",[30,953,955],{"id":954},"step-7-test-a-restore","Step 7 — Test a restore",[10,957,958],{},"A backup you have not restored is a backup you do not have. Before relying on the setup:",[97,960,961,964,970,973],{},[38,962,963],{},"From the PBS UI, select a snapshot on the S3 datastore.",[38,965,966,967,44],{},"Click ",[25,968,969],{},"File Restore",[38,971,972],{},"Browse the archive and extract a handful of files.",[38,974,975],{},"Separately, restore an entire VM snapshot to a new VM ID on PVE and boot it.",[10,977,978],{},"Do this after the initial setup, after any PBS upgrade, and on a rotating sample of snapshots at least monthly.",[30,980,982],{"id":981},"hummingtribe-s3-configuration","HummingTribe S3 configuration",[10,984,985],{},"HummingTribe S3 runs on Garage (S3-compatible) from our Hetzner facility in Germany. All storage is in the EU, zero egress fees, GDPR-compliant by default.",[10,987,988],{},"Values you'll use in the PBS S3 endpoint config:",[990,991,992,1005],"table",{},[993,994,995],"thead",{},[996,997,998,1002],"tr",{},[999,1000,1001],"th",{},"Field",[999,1003,1004],{},"Value",[1006,1007,1008,1019,1027,1037],"tbody",{},[996,1009,1010,1014],{},[1011,1012,1013],"td",{},"Endpoint",[1011,1015,1016],{},[14,1017,1018],{},"storage.hummingtribe.com",[996,1020,1021,1024],{},[1011,1022,1023],{},"Region",[1011,1025,1026],{},"(see your account dashboard)",[996,1028,1029,1032],{},[1011,1030,1031],{},"Path style",[1011,1033,1034],{},[14,1035,1036],{},"true",[996,1038,1039,1042],{},[1011,1040,1041],{},"Access key / Secret key",[1011,1043,1044],{},"from your S3 console",[10,1046,1047],{},"Create the endpoint:",[226,1049,1051],{"className":228,"code":1050,"language":230,"meta":231,"style":231},"proxmox-backup-manager s3 endpoint create hummingtribe \\\n  --access-key 'YOUR_HT_ACCESS_KEY' \\\n  --secret-key 'YOUR_HT_SECRET_KEY' \\\n  --endpoint 'storage.hummingtribe.com' \\\n  --region 'YOUR_REGION' \\\n  --path-style true\n",[14,1052,1053,1068,1077,1086,1095,1104],{"__ignoreMap":231},[235,1054,1055,1057,1059,1061,1063,1066],{"class":237,"line":238},[235,1056,242],{"class":241},[235,1058,246],{"class":245},[235,1060,249],{"class":245},[235,1062,252],{"class":245},[235,1064,1065],{"class":245}," hummingtribe",[235,1067,259],{"class":258},[235,1069,1070,1072,1075],{"class":237,"line":262},[235,1071,265],{"class":258},[235,1073,1074],{"class":245}," 'YOUR_HT_ACCESS_KEY'",[235,1076,259],{"class":258},[235,1078,1079,1081,1084],{"class":237,"line":273},[235,1080,276],{"class":258},[235,1082,1083],{"class":245}," 'YOUR_HT_SECRET_KEY'",[235,1085,259],{"class":258},[235,1087,1088,1090,1093],{"class":237,"line":284},[235,1089,287],{"class":258},[235,1091,1092],{"class":245}," 'storage.hummingtribe.com'",[235,1094,259],{"class":258},[235,1096,1097,1099,1102],{"class":237,"line":295},[235,1098,298],{"class":258},[235,1100,1101],{"class":245}," 'YOUR_REGION'",[235,1103,259],{"class":258},[235,1105,1106,1109],{"class":237,"line":795},[235,1107,1108],{"class":258},"  --path-style",[235,1110,951],{"class":258},[10,1112,1113],{},"Then create the datastore against your HummingTribe bucket:",[226,1115,1117],{"className":228,"code":1116,"language":230,"meta":231,"style":231},"proxmox-backup-manager datastore create ht-s3-offsite \\\n  /mnt/datastore/ht-s3-cache \\\n  --backend type=s3,client=hummingtribe,bucket=your-bucket-name\n",[14,1118,1119,1132,1139],{"__ignoreMap":231},[235,1120,1121,1123,1125,1127,1130],{"class":237,"line":238},[235,1122,242],{"class":241},[235,1124,492],{"class":245},[235,1126,252],{"class":245},[235,1128,1129],{"class":245}," ht-s3-offsite",[235,1131,259],{"class":258},[235,1133,1134,1137],{"class":237,"line":262},[235,1135,1136],{"class":245},"  /mnt/datastore/ht-s3-cache",[235,1138,259],{"class":258},[235,1140,1141,1143],{"class":237,"line":273},[235,1142,511],{"class":258},[235,1144,1145],{"class":245}," type=s3,client=hummingtribe,bucket=your-bucket-name\n",[10,1147,1148,1151],{},[25,1149,1150],{},"Why this is a fit for PBS offsite:"," zero egress means restore and verification operations don't incur surprise costs. EU-only data residency satisfies GDPR without a DPA negotiation. Flat monthly pricing removes the API-request cost variable that hurts cloud object storage PBS deployments on hyperscaler clouds.",[30,1153,1155],{"id":1154},"troubleshooting","Troubleshooting",[10,1157,1158,1164,1165,1168],{},[25,1159,1160,1163],{},[14,1161,1162],{},"certificate verify failed"," on endpoint test."," Self-signed or private CA cert. Add ",[14,1166,1167],{},"--fingerprint"," to the endpoint config with the SHA-256 fingerprint.",[10,1170,1171,1177,1178,51,1181,1184,1185,1188,1189,308,1192,1195],{},[25,1172,1173,1176],{},[14,1174,1175],{},"Access Denied"," on datastore creation."," Access key missing ",[14,1179,1180],{},"s3:PutObject",[14,1182,1183],{},"s3:DeleteObject",", or ",[14,1186,1187],{},"s3:ListBucket"," on the bucket. On AWS IAM, the policy needs both ",[14,1190,1191],{},"arn:aws:s3:::bucket-name",[14,1193,1194],{},"arn:aws:s3:::bucket-name/*"," resources.",[10,1197,1198,1201,1202,1205],{},[25,1199,1200],{},"Region errors on Cloudflare R2 or similar."," Set ",[14,1203,1204],{},"--region auto"," — R2 does not validate the region name but requires a non-empty value.",[10,1207,1208,1211],{},[25,1209,1210],{},"Datastore creation fails with \"path already a datastore\"."," Pick a cache path that is not already a PBS datastore. The cache cannot be nested inside another datastore directory.",[10,1213,1214,1217,1218,1221,1222,308,1225,1228,1229,1232],{},[25,1215,1216],{},"Migrating to a new PBS host."," On the new host, recreate the S3 endpoint config identically, then create the datastore with the ",[25,1219,1220],{},"same datastore name"," and both ",[14,1223,1224],{},"--reuse-datastore true",[14,1226,1227],{},"--overwrite-in-use true",". Never run two PBS instances against the same S3 datastore simultaneously — use the ",[14,1230,1231],{},"overwrite-in-use"," flag only when the original host is retired.",[10,1234,1235,1238,1239,1242,1243,1246],{},[25,1236,1237],{},"Running out of space on S3 mid-write."," Cleanup operations may fail alongside. Manually remove stray objects for the affected snapshot in the S3 console, then run an ",[25,1240,1241],{},"S3 refresh"," on the datastore (UI: ",[25,1244,1245],{},"Datastore → Refresh from S3",", or via CLI).",[30,1248,1250],{"id":1249},"what-to-do-next","What to do next",[10,1252,1253,1254,1257,1258,1261,1262,1265,1266,1271],{},"If you're evaluating providers for PBS offsite, the three variables that matter are: ",[25,1255,1256],{},"data residency"," (EU if you need GDPR), ",[25,1259,1260],{},"egress pricing"," (zero-egress beats per-GB charges for any verification workload), and ",[25,1263,1264],{},"API request pricing"," (matters for GC frequency). ",[1267,1268,1270],"a",{"href":1269},"/s3#pricing","HummingTribe S3"," addresses all three, with flat per-TB pricing and no egress charges, hosted in Germany.",[1273,1274,1275],"style",{},"html pre.shiki code .sScJk, html code.shiki .sScJk{--shiki-default:#6F42C1;--shiki-dark:#B392F0}html pre.shiki code .sZZnC, html code.shiki .sZZnC{--shiki-default:#032F62;--shiki-dark:#9ECBFF}html pre.shiki code .sj4cs, html code.shiki .sj4cs{--shiki-default:#005CC5;--shiki-dark:#79B8FF}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .szBVR, html code.shiki .szBVR{--shiki-default:#D73A49;--shiki-dark:#F97583}",{"title":231,"searchDepth":262,"depth":262,"links":1277},[1278,1279,1280,1284,1285,1286,1287,1288,1289,1290,1291,1292,1293,1294,1295],{"id":32,"depth":262,"text":33},{"id":74,"depth":262,"text":75},{"id":124,"depth":262,"text":125,"children":1281},[1282,1283],{"id":129,"depth":273,"text":130},{"id":148,"depth":273,"text":149},{"id":172,"depth":262,"text":173},{"id":207,"depth":262,"text":208},{"id":414,"depth":262,"text":415},{"id":461,"depth":262,"text":462},{"id":561,"depth":262,"text":562},{"id":604,"depth":262,"text":605},{"id":841,"depth":262,"text":842},{"id":891,"depth":262,"text":892},{"id":954,"depth":262,"text":955},{"id":981,"depth":262,"text":982},{"id":1154,"depth":262,"text":1155},{"id":1249,"depth":262,"text":1250},"2026-04-22","Configure PBS with S3-compatible object storage: primary datastore, local + offsite sync pattern, encryption, and GC tuning. For homelab and MSP use.","md",{},true,"/docs/proxmox-backup-server-s3-offsite",{"title":5,"description":1297},{"loc":1301},"docs/proxmox-backup-server-s3-offsite",[1306,1307,1308,1309,1310,1311],"pbs","proxmox","s3","backup","offsite","setup-guide","KZ8RonFJOmpTwwHf105xbY-yodEm9fVVhwbjneiq2wg",[1314,1779,2243],{"id":1315,"title":1316,"body":1317,"date":1296,"description":1767,"extension":1298,"meta":1768,"navigation":1300,"path":1769,"seo":1770,"sitemap":1771,"stem":1772,"tags":1773,"tool":1775,"__hash__":1778},"docs/docs/cyberduck-eu-s3-setup.md","Cyberduck — S3 Browser and Ad-Hoc Transfers (Windows, macOS)",{"type":7,"value":1318,"toc":1756},[1319,1326,1330,1336,1358,1361,1365,1381,1385,1404,1410,1413,1473,1479,1495,1498,1502,1516,1522,1526,1543,1553,1559,1575,1579,1582,1618,1628,1632,1635,1642,1658,1664,1668,1675,1682,1706,1709,1715,1718,1722,1744,1751],[10,1320,1321,1322,1325],{},"GUI-based S3 client for Windows and macOS. Best for browsing your bucket, ad-hoc uploads and downloads, manual restores, and inspecting backup contents. ",[25,1323,1324],{},"Not a scheduled backup tool"," — for automated backups, use restic, rclone, or Duplicati. Cyberduck complements those tools rather than replacing them.",[127,1327,1329],{"id":1328},"_1-install-cyberduck","1. Install Cyberduck",[10,1331,1332,1333,44],{},"Download the installer from ",[25,1334,1335],{},"cyberduck.io",[35,1337,1338,1348],{},[38,1339,1340,1343,1344,1347],{},[25,1341,1342],{},"Windows:"," run the ",[14,1345,1346],{},".exe"," installer.",[38,1349,1350,1353,1354,1357],{},[25,1351,1352],{},"macOS:"," mount the ",[14,1355,1356],{},".zip"," and drag Cyberduck to Applications.",[10,1359,1360],{},"Cyberduck is donationware — free to use, with a nag screen on launch unless you purchase a registration key from the Mac App Store or Microsoft Store.",[127,1362,1364],{"id":1363},"_2-get-your-s3-credentials","2. Get your S3 credentials",[10,1366,1367,1368,1372,1373,1376,1377,1380],{},"Log in to your ",[1267,1369,1371],{"href":1370},"/dashboard","HummingTribe dashboard"," → S3 Storage tab. Copy your ",[25,1374,1375],{},"Access Key ID"," and reveal your ",[25,1378,1379],{},"Secret Access Key"," (shown once — save it now). Note your bucket name.",[127,1382,1384],{"id":1383},"_3-create-a-new-bookmark","3. Create a new bookmark",[10,1386,1387,1388,1391,1392,1395,1396,1399,1400,1403],{},"Open Cyberduck → ",[25,1389,1390],{},"Bookmark"," menu → ",[25,1393,1394],{},"New Bookmark"," (or press ",[14,1397,1398],{},"Cmd+Shift+B"," / ",[14,1401,1402],{},"Ctrl+Shift+B",").",[10,1405,1406,1407,44],{},"In the bookmark editor, set the connection type at the top to ",[25,1408,1409],{},"S3 (HTTPS)",[10,1411,1412],{},"Fill in the fields:",[990,1414,1415,1423],{},[993,1416,1417],{},[996,1418,1419,1421],{},[999,1420,1001],{},[999,1422,1004],{},[1006,1424,1425,1435,1444,1454,1461],{},[996,1426,1427,1430],{},[1011,1428,1429],{},"Nickname",[1011,1431,1432],{},[14,1433,1434],{},"HummingTribe",[996,1436,1437,1440],{},[1011,1438,1439],{},"Server",[1011,1441,1442],{},[14,1443,1018],{},[996,1445,1446,1449],{},[1011,1447,1448],{},"Port",[1011,1450,1451],{},[14,1452,1453],{},"443",[996,1455,1456,1458],{},[1011,1457,1375],{},[1011,1459,1460],{},"your Access Key ID",[996,1462,1463,1466],{},[1011,1464,1465],{},"Path",[1011,1467,1468,1469,1472],{},"your bucket name (e.g. ",[14,1470,1471],{},"my-bucket",")",[10,1474,966,1475,1478],{},[25,1476,1477],{},"More Options"," to expand advanced settings:",[35,1480,1481,1489],{},[38,1482,1483,467,1486],{},[25,1484,1485],{},"Transfer Files:",[14,1487,1488],{},"Use browser connection",[38,1490,1491,1494],{},[25,1492,1493],{},"Connect Mode:"," leave default",[10,1496,1497],{},"Close the bookmark editor — Cyberduck saves automatically.",[127,1499,1501],{"id":1500},"_4-connect-and-authenticate","4. Connect and authenticate",[10,1503,1504,1505,1507,1508,1511,1512,1515],{},"Double-click the bookmark in the main browser window. Cyberduck prompts for your ",[25,1506,1379],{}," — paste it and tick ",[25,1509,1510],{},"Add to Keychain"," (macOS) or ",[25,1513,1514],{},"Save Password"," (Windows) so you don't have to re-enter it.",[10,1517,966,1518,1521],{},[25,1519,1520],{},"Login",". Cyberduck connects to HummingTribe and shows the contents of your bucket. An empty bucket shows a blank file list.",[127,1523,1525],{"id":1524},"_5-upload-and-download-files","5. Upload and download files",[10,1527,1528,1531,1532,1535,1536,1399,1539,1542],{},[25,1529,1530],{},"Upload:"," drag files or folders from Finder/Explorer into the Cyberduck window. Transfers run in the ",[25,1533,1534],{},"Transfers"," window (",[14,1537,1538],{},"Cmd+T",[14,1540,1541],{},"Ctrl+T",") with per-file progress.",[10,1544,1545,1548,1549,1552],{},[25,1546,1547],{},"Download:"," drag files from Cyberduck to your desktop, or right-click → ",[25,1550,1551],{},"Download To..."," to pick a destination.",[10,1554,1555,1558],{},[25,1556,1557],{},"Resume interrupted transfers:"," Cyberduck automatically detects partial transfers and offers to resume on next connect.",[10,1560,1561,1562,1565,1566,1565,1568,1565,1571,1574],{},"For large multi-gigabyte uploads, Cyberduck uses S3 multipart uploads automatically. The default chunk size is 10 MB — adjust under ",[25,1563,1564],{},"Preferences"," → ",[25,1567,1534],{},[25,1569,1570],{},"General",[25,1572,1573],{},"Multipart download/upload"," if you need to.",[127,1576,1578],{"id":1577},"_6-browse-and-inspect-backups","6. Browse and inspect backups",[10,1580,1581],{},"Cyberduck is the easiest way to verify what your backup tools have written:",[35,1583,1584,1590,1600,1612],{},[38,1585,1586,1589],{},[25,1587,1588],{},"Path navigation:"," click into folders to drill down. Use the breadcrumb bar at the top to jump back up.",[38,1591,1592,1595,1596,1599],{},[25,1593,1594],{},"File info:"," right-click any file → ",[25,1597,1598],{},"Info"," to see size, modification date, storage class, and S3 metadata.",[38,1601,1602,467,1605,1399,1608,1611],{},[25,1603,1604],{},"Search:",[14,1606,1607],{},"Cmd+F",[14,1609,1610],{},"Ctrl+F"," filters the current folder by name.",[38,1613,1614,1617],{},[25,1615,1616],{},"Sort:"," click column headers (Filename, Size, Modified) to sort.",[10,1619,1620,1621,308,1624,1627],{},"This is particularly useful for confirming restic snapshot directories, rclone sync results, or Duplicati ",[14,1622,1623],{},".dblock",[14,1625,1626],{},".dindex"," files are present in the bucket.",[127,1629,1631],{"id":1630},"_7-restore-a-single-file","7. Restore a single file",[10,1633,1634],{},"Restoring an individual file from a structured backup (restic, Duplicati) requires the original tool — those tools store data in their own internal format and cannot be browsed file-by-file in Cyberduck.",[10,1636,1637,1638,1641],{},"Cyberduck restores work for files uploaded ",[25,1639,1640],{},"directly"," as files (e.g. via rclone copy, or manual uploads). To restore:",[97,1643,1644,1647,1652],{},[38,1645,1646],{},"Navigate to the file in the bucket.",[38,1648,1649,1650],{},"Right-click → ",[25,1651,1551],{},[38,1653,1654,1655,44],{},"Choose a local destination → ",[25,1656,1657],{},"Choose",[10,1659,1660,1661,1663],{},"For an entire folder, right-click the folder → ",[25,1662,1551],{}," — Cyberduck downloads the folder tree recursively.",[127,1665,1667],{"id":1666},"_8-optional-client-side-encryption-with-cryptomator","8. Optional — client-side encryption with Cryptomator",[10,1669,1670,1671,1674],{},"Cyberduck integrates with ",[25,1672,1673],{},"Cryptomator"," for transparent client-side encryption. Files are encrypted on your machine before upload — HummingTribe never sees the plaintext.",[10,1676,1677,1678,1681],{},"Install Cryptomator from ",[25,1679,1680],{},"cryptomator.org",". Then in Cyberduck:",[97,1683,1684,1687,1693,1703],{},[38,1685,1686],{},"Connect to your bucket (step 4).",[38,1688,1689,1690,44],{},"Right-click in the browser pane → ",[25,1691,1692],{},"New Encrypted Vault",[38,1694,1695,1696,1699,1700,44],{},"Choose a vault name (e.g. ",[14,1697,1698],{},"vault",") and a strong ",[25,1701,1702],{},"passphrase",[38,1704,1705],{},"Cyberduck creates the Cryptomator vault structure in your bucket.",[10,1707,1708],{},"After creation, Cyberduck shows a virtual unlocked vault. Files dragged in are encrypted before upload; files dragged out are decrypted on download. The vault passphrase is required on every reconnection.",[10,1710,1711,1714],{},[25,1712,1713],{},"If you lose the vault passphrase, the files are unrecoverable."," Cryptomator has no recovery mechanism. Store the passphrase in a password manager.",[10,1716,1717],{},"This is a useful pattern for sensitive ad-hoc files — but for full automated backups, use restic or Duplicati's built-in encryption instead.",[127,1719,1721],{"id":1720},"_9-sync-one-off-manual","9. Sync (one-off, manual)",[10,1723,1724,1725,1728,1729,1731,1732,1735,1736,1739,1740,1743],{},"Cyberduck has a ",[25,1726,1727],{},"Synchronize"," feature (right-click bookmark → ",[25,1730,1727],{},") that compares a local folder to a remote folder and offers three modes: ",[25,1733,1734],{},"Download"," (remote → local), ",[25,1737,1738],{},"Upload"," (local → remote), or ",[25,1741,1742],{},"Mirror"," (both directions).",[10,1745,1746,1747,1750],{},"This is useful for occasional one-off sync operations, but ",[25,1748,1749],{},"it is not scheduled and not incremental"," — every sync rescans the entire folder tree. For automated, deduplicated, scheduled sync, use rclone instead.",[10,1752,1753,1754,44],{},"Manage your bucket and credentials from your ",[1267,1755,1371],{"href":1370},{"title":231,"searchDepth":262,"depth":262,"links":1757},[1758,1759,1760,1761,1762,1763,1764,1765,1766],{"id":1328,"depth":273,"text":1329},{"id":1363,"depth":273,"text":1364},{"id":1383,"depth":273,"text":1384},{"id":1500,"depth":273,"text":1501},{"id":1524,"depth":273,"text":1525},{"id":1577,"depth":273,"text":1578},{"id":1630,"depth":273,"text":1631},{"id":1666,"depth":273,"text":1667},{"id":1720,"depth":273,"text":1721},"Use Cyberduck to browse, upload, and restore files in HummingTribe S3. GUI-based S3 client for Windows and macOS, with Cryptomator integration for client-side encryption.",{},"/docs/cyberduck-eu-s3-setup",{"title":1316,"description":1767},{"loc":1769},"docs/cyberduck-eu-s3-setup",[1308,1774,1311,1775,1776,1777],"browser","cyberduck","windows","macos","gAR0zLszGpWSm3n8aqLR8C4rKjE39jAjRg7z7uAQzHk",{"id":1780,"title":1781,"body":1782,"date":1296,"description":2234,"extension":1298,"meta":2235,"navigation":1300,"path":2236,"seo":2237,"sitemap":2238,"stem":2239,"tags":2240,"tool":2241,"__hash__":2242},"docs/docs/duplicati-eu-s3-setup.md","Duplicati — Automated Encrypted Backups (Windows, macOS, Linux)",{"type":7,"value":1783,"toc":2222},[1784,1787,1791,1797,1825,1850,1857,1859,1867,1871,1883,1894,1898,1909,1915,1919,1923,1937,1939,2031,2039,2043,2046,2080,2089,2093,2100,2122,2126,2130,2141,2148,2151,2164,2168,2175,2182,2186,2192,2206,2215,2219],[10,1785,1786],{},"Free, open-source, cross-platform backup with a web-based GUI. Built-in AES-256 encryption, block-level deduplication, and scheduling. Runs on Windows, macOS, and Linux.",[127,1788,1790],{"id":1789},"_1-install-duplicati","1. Install Duplicati",[10,1792,1793,1794,44],{},"Download the latest installer for your platform from ",[25,1795,1796],{},"duplicati.com/download",[35,1798,1799,1807,1815],{},[38,1800,1801,1343,1803,1806],{},[25,1802,1342],{},[14,1804,1805],{},".msi"," installer. Duplicati installs as a tray application and a background service.",[38,1808,1809,1353,1811,1814],{},[25,1810,1352],{},[14,1812,1813],{},".dmg"," and drag Duplicati to Applications.",[38,1816,1817,1820,1821,1824],{},[25,1818,1819],{},"Linux (Debian/Ubuntu):"," install the ",[14,1822,1823],{},".deb"," package:",[226,1826,1828],{"className":228,"code":1827,"language":230,"meta":231,"style":231},"sudo apt install ./duplicati_*.deb\n",[14,1829,1830],{"__ignoreMap":231},[235,1831,1832,1835,1838,1841,1844,1847],{"class":237,"line":238},[235,1833,1834],{"class":241},"sudo",[235,1836,1837],{"class":245}," apt",[235,1839,1840],{"class":245}," install",[235,1842,1843],{"class":245}," ./duplicati_",[235,1845,1846],{"class":258},"*",[235,1848,1849],{"class":245},".deb\n",[10,1851,1852,1853,1856],{},"On first launch, Duplicati opens the web UI at ",[14,1854,1855],{},"http://localhost:8200",". All configuration happens through the browser.",[127,1858,1364],{"id":1363},[10,1860,1367,1861,1372,1863,1376,1865,1380],{},[1267,1862,1371],{"href":1370},[25,1864,1375],{},[25,1866,1379],{},[127,1868,1870],{"id":1869},"_3-create-a-new-backup-job","3. Create a new backup job",[10,1872,1873,1874,1565,1877,1565,1880,44],{},"In the Duplicati web UI, click ",[25,1875,1876],{},"Add backup",[25,1878,1879],{},"Configure a new backup",[25,1881,1882],{},"Next",[10,1884,1885,1886,1889,1890,1893],{},"Enter a ",[25,1887,1888],{},"Name"," for the job (e.g. ",[14,1891,1892],{},"Laptop → HummingTribe",") and an optional description.",[127,1895,1897],{"id":1896},"_4-configure-encryption","4. Configure encryption",[10,1899,1900,1901,1904,1905,1908],{},"On the same page, leave encryption set to ",[25,1902,1903],{},"AES-256 encryption, built in",". Enter a strong ",[25,1906,1907],{},"Passphrase"," and confirm it.",[10,1910,1911,1914],{},[25,1912,1913],{},"If you lose this passphrase, your backups are unrecoverable"," — Duplicati has no password reset. Store it in a password manager.",[10,1916,966,1917,44],{},[25,1918,1882],{},[127,1920,1922],{"id":1921},"_5-configure-the-s3-destination","5. Configure the S3 destination",[10,1924,1925,1926,1929,1930,1933,1934,44],{},"On the ",[25,1927,1928],{},"Destination"," screen, set ",[25,1931,1932],{},"Storage Type"," to ",[25,1935,1936],{},"S3 Compatible",[10,1938,1412],{},[990,1940,1941,1949],{},[993,1942,1943],{},[996,1944,1945,1947],{},[999,1946,1001],{},[999,1948,1004],{},[1006,1950,1951,1960,1968,1976,1984,1994,2006,2013,2021],{},[996,1952,1953,1955],{},[1011,1954,1439],{},[1011,1956,1957],{},[14,1958,1959],{},"Custom server URL",[996,1961,1962,1964],{},[1011,1963,1959],{},[1011,1965,1966],{},[14,1967,1018],{},[996,1969,1970,1973],{},[1011,1971,1972],{},"Bucket name",[1011,1974,1975],{},"your bucket name from the dashboard",[996,1977,1978,1981],{},[1011,1979,1980],{},"Bucket create region",[1011,1982,1983],{},"leave blank",[996,1985,1986,1989],{},[1011,1987,1988],{},"Storage class",[1011,1990,1991],{},[14,1992,1993],{},"(Default)",[996,1995,1996,1999],{},[1011,1997,1998],{},"Folder path",[1011,2000,2001,2002,2005],{},"leave blank (or e.g. ",[14,2003,2004],{},"laptop-backup"," for a subfolder)",[996,2007,2008,2011],{},[1011,2009,2010],{},"AWS Access ID",[1011,2012,1460],{},[996,2014,2015,2018],{},[1011,2016,2017],{},"AWS Access Key",[1011,2019,2020],{},"your Secret Access Key",[996,2022,2023,2026],{},[1011,2024,2025],{},"Client library to use",[1011,2027,2028],{},[14,2029,2030],{},"Amazon AWS SDK",[10,2032,966,2033,2036,2037,44],{},[25,2034,2035],{},"Test connection",". Duplicati will verify credentials and confirm the bucket is reachable. If prompted to use path-style URLs, accept — HummingTribe requires path-style access. Click ",[25,2038,1882],{},[127,2040,2042],{"id":2041},"_6-select-source-data","6. Select source data",[10,2044,2045],{},"Expand the filesystem tree and tick the folders you want to back up. Typical selections:",[35,2047,2048,2061,2072],{},[38,2049,2050,467,2052,51,2055,51,2058],{},[25,2051,1342],{},[14,2053,2054],{},"C:\\Users\\\u003Cname>\\Documents",[14,2056,2057],{},"Desktop",[14,2059,2060],{},"Pictures",[38,2062,2063,467,2065,51,2068,51,2070],{},[25,2064,1352],{},[14,2066,2067],{},"/Users/\u003Cname>/Documents",[14,2069,2057],{},[14,2071,2060],{},[38,2073,2074,467,2077],{},[25,2075,2076],{},"Linux:",[14,2078,2079],{},"/home/\u003Cuser>",[10,2081,2082,2083,2086,2087,44],{},"Use the ",[25,2084,2085],{},"Filters"," tab to exclude caches, virtual machines, or large files you don't need backed up. Click ",[25,2088,1882],{},[127,2090,2092],{"id":2091},"_7-set-schedule","7. Set schedule",[10,2094,2095,2096,2099],{},"Enable ",[25,2097,2098],{},"Automatically run backups"," and set:",[35,2101,2102,2108,2116],{},[38,2103,2104,2107],{},[25,2105,2106],{},"Next time:"," today's date and a time after hours (e.g. 02:00)",[38,2109,2110,467,2113],{},[25,2111,2112],{},"Run again every:",[14,2114,2115],{},"1 Days",[38,2117,2118,2121],{},[25,2119,2120],{},"Allowed days:"," all",[10,2123,966,2124,44],{},[25,2125,1882],{},[127,2127,2129],{"id":2128},"_8-set-retention-policy","8. Set retention policy",[10,2131,2132,2133,2136,2137,2140],{},"Under ",[25,2134,2135],{},"Backup retention",", pick a policy. ",[25,2138,2139],{},"Smart backup retention"," is the sensible default — it keeps one backup per day for the last week, one per week for the last month, and one per month for the last year.",[10,2142,2143,2144,2147],{},"For more control, choose ",[25,2145,2146],{},"Custom backup retention"," and enter a policy string like:\n7D:1D,4W:1W,12M:1M",[10,2149,2150],{},"This reads as: keep one version per day for 7 days, one per week for 4 weeks, one per month for 12 months.",[10,2152,2153,2154,1933,2157,2160,2161,44],{},"Set ",[25,2155,2156],{},"Remote volume size",[14,2158,2159],{},"50 MB"," (default) for most connections. Click ",[25,2162,2163],{},"Save",[127,2165,2167],{"id":2166},"_9-run-the-first-backup-and-verify","9. Run the first backup and verify",[10,2169,2170,2171,2174],{},"From the backup job's panel, click ",[25,2172,2173],{},"Run now",". The first backup uploads all selected data and will take time proportional to the dataset size and your upload bandwidth. Subsequent backups only upload changed blocks.",[10,2176,2177,2178,2181],{},"After completion, click ",[25,2179,2180],{},"Verify files"," on the job panel. Duplicati downloads a sample of backup volumes and checks their integrity against the local database. Run this periodically — a backup you haven't verified is a backup you don't have.",[127,2183,2185],{"id":2184},"_10-restore-from-backup","10. Restore from backup",[10,2187,966,2188,2191],{},[25,2189,2190],{},"Restore"," in the left sidebar → select the backup job → choose a restore point (date/time) → tick the files or folders to restore.",[10,2193,2194,2195,2198,2199,2202,2203,2205],{},"Choose a restore destination — ",[25,2196,2197],{},"Original location"," (overwrites existing files) or ",[25,2200,2201],{},"Pick location"," (restores to a new folder). Click ",[25,2204,2190],{}," and wait for completion.",[10,2207,2208,2209,1565,2211,2214],{},"To restore on a different machine (disaster recovery), install Duplicati, choose ",[25,2210,2190],{},[25,2212,2213],{},"Direct restore from backup files",", enter the same S3 destination settings, and provide your encryption passphrase. Duplicati will rebuild the local database from the remote backup and let you restore any snapshot.",[10,2216,1753,2217,44],{},[1267,2218,1371],{"href":1370},[1273,2220,2221],{},"html pre.shiki code .sScJk, html code.shiki .sScJk{--shiki-default:#6F42C1;--shiki-dark:#B392F0}html pre.shiki code .sZZnC, html code.shiki .sZZnC{--shiki-default:#032F62;--shiki-dark:#9ECBFF}html pre.shiki code .sj4cs, html code.shiki .sj4cs{--shiki-default:#005CC5;--shiki-dark:#79B8FF}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"title":231,"searchDepth":262,"depth":262,"links":2223},[2224,2225,2226,2227,2228,2229,2230,2231,2232,2233],{"id":1789,"depth":273,"text":1790},{"id":1363,"depth":273,"text":1364},{"id":1869,"depth":273,"text":1870},{"id":1896,"depth":273,"text":1897},{"id":1921,"depth":273,"text":1922},{"id":2041,"depth":273,"text":2042},{"id":2091,"depth":273,"text":2092},{"id":2128,"depth":273,"text":2129},{"id":2166,"depth":273,"text":2167},{"id":2184,"depth":273,"text":2185},"Set up Duplicati for scheduled, encrypted backups to HummingTribe S3. GUI-based, cross-platform, with built-in AES-256 encryption and retention policies.",{},"/docs/duplicati-eu-s3-setup",{"title":1781,"description":2234},{"loc":2236},"docs/duplicati-eu-s3-setup",[1308,1309,1311,2241],"duplicati","zjrwGDNPVZ1ODbnCXI5olSoyy9c5g4KFeFiLGYcJhhs",{"id":2244,"title":2245,"body":2246,"date":1296,"description":3042,"extension":1298,"meta":3043,"navigation":1300,"path":3044,"seo":3045,"sitemap":3046,"stem":3047,"tags":3048,"tool":2351,"__hash__":3050},"docs/docs/rclone-eu-s3-setup.md","rclone — Scripted Sync and Transfer from the Command Line",{"type":7,"value":2247,"toc":3032},[2248,2251,2255,2258,2274,2277,2291,2312,2318,2339,2342,2355,2357,2365,2369,2372,2384,2387,2398,2414,2418,2421,2436,2439,2454,2457,2461,2467,2488,2498,2516,2527,2545,2549,2642,2645,2679,2683,2692,2736,2751,2759,2910,2913,2929,2939,2943,2946,2963,2966,2984,2987,3005,3008,3025,3029],[10,2249,2250],{},"Swiss-army command-line tool for cloud storage. Scripted sync, copy, and mount operations against any S3-compatible backend. Works on Linux, macOS, and Windows.",[127,2252,2254],{"id":2253},"_1-install-rclone","1. Install rclone",[10,2256,2257],{},"On Debian/Ubuntu:",[226,2259,2261],{"className":228,"code":2260,"language":230,"meta":231,"style":231},"sudo apt install rclone\n",[14,2262,2263],{"__ignoreMap":231},[235,2264,2265,2267,2269,2271],{"class":237,"line":238},[235,2266,1834],{"class":241},[235,2268,1837],{"class":245},[235,2270,1840],{"class":245},[235,2272,2273],{"class":245}," rclone\n",[10,2275,2276],{},"On macOS:",[226,2278,2280],{"className":228,"code":2279,"language":230,"meta":231,"style":231},"brew install rclone\n",[14,2281,2282],{"__ignoreMap":231},[235,2283,2284,2287,2289],{"class":237,"line":238},[235,2285,2286],{"class":241},"brew",[235,2288,1840],{"class":245},[235,2290,2273],{"class":245},[10,2292,2293,2294,2296,2297,2300,2301,2304,2305,2308,2309,1403],{},"On Windows, download the ",[14,2295,1356],{}," from ",[25,2298,2299],{},"rclone.org/downloads"," and extract ",[14,2302,2303],{},"rclone.exe"," to a folder on your ",[14,2306,2307],{},"PATH"," (e.g. ",[14,2310,2311],{},"C:\\Program Files\\rclone",[10,2313,304,2314,2317],{},[14,2315,2316],{},"apt"," package may lag behind upstream. For the latest version on any platform, use the official installer:",[226,2319,2321],{"className":228,"code":2320,"language":230,"meta":231,"style":231},"curl https://rclone.org/install.sh | sudo bash\n",[14,2322,2323],{"__ignoreMap":231},[235,2324,2325,2328,2331,2333,2336],{"class":237,"line":238},[235,2326,2327],{"class":241},"curl",[235,2329,2330],{"class":245}," https://rclone.org/install.sh",[235,2332,373],{"class":360},[235,2334,2335],{"class":241}," sudo",[235,2337,2338],{"class":245}," bash\n",[10,2340,2341],{},"Verify the install:",[226,2343,2345],{"className":228,"code":2344,"language":230,"meta":231,"style":231},"rclone version\n",[14,2346,2347],{"__ignoreMap":231},[235,2348,2349,2352],{"class":237,"line":238},[235,2350,2351],{"class":241},"rclone",[235,2353,2354],{"class":245}," version\n",[127,2356,1364],{"id":1363},[10,2358,1367,2359,1372,2361,1376,2363,1380],{},[1267,2360,1371],{"href":1370},[25,2362,1375],{},[25,2364,1379],{},[127,2366,2368],{"id":2367},"_3-configure-the-remote","3. Configure the remote",[10,2370,2371],{},"Run the interactive config wizard:",[226,2373,2375],{"className":228,"code":2374,"language":230,"meta":231,"style":231},"rclone config\n",[14,2376,2377],{"__ignoreMap":231},[235,2378,2379,2381],{"class":237,"line":238},[235,2380,2351],{"class":241},[235,2382,2383],{"class":245}," config\n",[10,2385,2386],{},"Answer the prompts:\nn) New remote\nname> hummingtribe\nStorage> s3\nprovider> Other\nenv_auth> false\naccess_key_id> your-access-key-id\nsecret_access_key> your-secret-access-key\nregion> (leave blank, press Enter)\nendpoint> storage.hummingtribe.com\nlocation_constraint> (leave blank)\nacl> private\nEdit advanced config? n\nKeep this \"hummingtribe\" remote? y\nq) Quit config",[10,2388,2389,2390,2393,2394,2397],{},"This writes the remote to ",[14,2391,2392],{},"~/.config/rclone/rclone.conf"," (Linux/macOS) or ",[14,2395,2396],{},"%APPDATA%\\rclone\\rclone.conf"," (Windows). Lock down permissions on Linux/macOS — the file contains your S3 credentials in plaintext:",[226,2399,2401],{"className":228,"code":2400,"language":230,"meta":231,"style":231},"chmod 600 ~/.config/rclone/rclone.conf\n",[14,2402,2403],{"__ignoreMap":231},[235,2404,2405,2408,2411],{"class":237,"line":238},[235,2406,2407],{"class":241},"chmod",[235,2409,2410],{"class":258}," 600",[235,2412,2413],{"class":245}," ~/.config/rclone/rclone.conf\n",[127,2415,2417],{"id":2416},"_4-test-the-connection","4. Test the connection",[10,2419,2420],{},"List buckets on the remote:",[226,2422,2424],{"className":228,"code":2423,"language":230,"meta":231,"style":231},"rclone lsd hummingtribe:\n",[14,2425,2426],{"__ignoreMap":231},[235,2427,2428,2430,2433],{"class":237,"line":238},[235,2429,2351],{"class":241},[235,2431,2432],{"class":245}," lsd",[235,2434,2435],{"class":245}," hummingtribe:\n",[10,2437,2438],{},"You should see your bucket name in the output. List the contents of your bucket:",[226,2440,2442],{"className":228,"code":2441,"language":230,"meta":231,"style":231},"rclone ls hummingtribe:your-bucket-name\n",[14,2443,2444],{"__ignoreMap":231},[235,2445,2446,2448,2451],{"class":237,"line":238},[235,2447,2351],{"class":241},[235,2449,2450],{"class":245}," ls",[235,2452,2453],{"class":245}," hummingtribe:your-bucket-name\n",[10,2455,2456],{},"An empty bucket returns no output and exit code 0.",[127,2458,2460],{"id":2459},"_5-copy-or-sync-data","5. Copy or sync data",[10,2462,2463,2466],{},[14,2464,2465],{},"rclone copy"," uploads new and changed files without deleting anything on the destination:",[226,2468,2470],{"className":228,"code":2469,"language":230,"meta":231,"style":231},"rclone copy /path/to/data hummingtribe:your-bucket-name/data --progress\n",[14,2471,2472],{"__ignoreMap":231},[235,2473,2474,2476,2479,2482,2485],{"class":237,"line":238},[235,2475,2351],{"class":241},[235,2477,2478],{"class":245}," copy",[235,2480,2481],{"class":245}," /path/to/data",[235,2483,2484],{"class":245}," hummingtribe:your-bucket-name/data",[235,2486,2487],{"class":258}," --progress\n",[10,2489,2490,2493,2494,2497],{},[14,2491,2492],{},"rclone sync"," makes the destination match the source — ",[25,2495,2496],{},"files deleted locally will be deleted on the remote",":",[226,2499,2501],{"className":228,"code":2500,"language":230,"meta":231,"style":231},"rclone sync /path/to/data hummingtribe:your-bucket-name/data --progress\n",[14,2502,2503],{"__ignoreMap":231},[235,2504,2505,2507,2510,2512,2514],{"class":237,"line":238},[235,2506,2351],{"class":241},[235,2508,2509],{"class":245}," sync",[235,2511,2481],{"class":245},[235,2513,2484],{"class":245},[235,2515,2487],{"class":258},[10,2517,2518,2519,2522,2523,2526],{},"Always run ",[14,2520,2521],{},"sync"," with ",[14,2524,2525],{},"--dry-run"," first to confirm what will change:",[226,2528,2530],{"className":228,"code":2529,"language":230,"meta":231,"style":231},"rclone sync /path/to/data hummingtribe:your-bucket-name/data --dry-run\n",[14,2531,2532],{"__ignoreMap":231},[235,2533,2534,2536,2538,2540,2542],{"class":237,"line":238},[235,2535,2351],{"class":241},[235,2537,2509],{"class":245},[235,2539,2481],{"class":245},[235,2541,2484],{"class":245},[235,2543,2544],{"class":258}," --dry-run\n",[127,2546,2548],{"id":2547},"_6-useful-flags","6. Useful flags",[990,2550,2551,2561],{},[993,2552,2553],{},[996,2554,2555,2558],{},[999,2556,2557],{},"Flag",[999,2559,2560],{},"Purpose",[1006,2562,2563,2573,2582,2592,2602,2612,2622,2632],{},[996,2564,2565,2570],{},[1011,2566,2567],{},[14,2568,2569],{},"--progress",[1011,2571,2572],{},"Live transfer stats in the terminal",[996,2574,2575,2579],{},[1011,2576,2577],{},[14,2578,2525],{},[1011,2580,2581],{},"Show what would happen without transferring anything",[996,2583,2584,2589],{},[1011,2585,2586],{},[14,2587,2588],{},"--transfers 8",[1011,2590,2591],{},"Run 8 parallel file transfers (default 4)",[996,2593,2594,2599],{},[1011,2595,2596],{},[14,2597,2598],{},"--checkers 16",[1011,2600,2601],{},"Run 16 parallel hash checks (default 8)",[996,2603,2604,2609],{},[1011,2605,2606],{},[14,2607,2608],{},"--bwlimit 10M",[1011,2610,2611],{},"Cap bandwidth at 10 MB/s",[996,2613,2614,2619],{},[1011,2615,2616],{},[14,2617,2618],{},"--exclude \"*.tmp\"",[1011,2620,2621],{},"Skip files matching a pattern",[996,2623,2624,2629],{},[1011,2625,2626],{},[14,2627,2628],{},"--log-file /var/log/rclone.log",[1011,2630,2631],{},"Write a log file",[996,2633,2634,2639],{},[1011,2635,2636],{},[14,2637,2638],{},"--log-level INFO",[1011,2640,2641],{},"Log verbosity (DEBUG, INFO, NOTICE, ERROR)",[10,2643,2644],{},"For large datasets, tune parallelism:",[226,2646,2648],{"className":228,"code":2647,"language":230,"meta":231,"style":231},"rclone sync /data hummingtribe:your-bucket-name/data \\\n  --transfers 16 --checkers 32 --progress\n",[14,2649,2650,2663],{"__ignoreMap":231},[235,2651,2652,2654,2656,2659,2661],{"class":237,"line":238},[235,2653,2351],{"class":241},[235,2655,2509],{"class":245},[235,2657,2658],{"class":245}," /data",[235,2660,2484],{"class":245},[235,2662,259],{"class":258},[235,2664,2665,2668,2671,2674,2677],{"class":237,"line":262},[235,2666,2667],{"class":258},"  --transfers",[235,2669,2670],{"class":258}," 16",[235,2672,2673],{"class":258}," --checkers",[235,2675,2676],{"class":258}," 32",[235,2678,2487],{"class":258},[127,2680,2682],{"id":2681},"_7-automate-with-cron-or-task-scheduler","7. Automate with cron or Task Scheduler",[10,2684,2685,2688,2689,2497],{},[25,2686,2687],{},"Linux (cron):"," Create ",[14,2690,2691],{},"/etc/cron.d/rclone-sync",[226,2693,2695],{"className":228,"code":2694,"language":230,"meta":231,"style":231},"0 2 * * * root /usr/bin/rclone sync /path/to/data hummingtribe:your-bucket-name/data --log-file /var/log/rclone.log --log-level INFO\n",[14,2696,2697],{"__ignoreMap":231},[235,2698,2699,2702,2705,2708,2710,2712,2715,2718,2720,2722,2724,2727,2730,2733],{"class":237,"line":238},[235,2700,2701],{"class":241},"0",[235,2703,2704],{"class":258}," 2",[235,2706,2707],{"class":258}," *",[235,2709,2707],{"class":258},[235,2711,2707],{"class":258},[235,2713,2714],{"class":245}," root",[235,2716,2717],{"class":245}," /usr/bin/rclone",[235,2719,2509],{"class":245},[235,2721,2481],{"class":245},[235,2723,2484],{"class":245},[235,2725,2726],{"class":258}," --log-file",[235,2728,2729],{"class":245}," /var/log/rclone.log",[235,2731,2732],{"class":258}," --log-level",[235,2734,2735],{"class":245}," INFO\n",[10,2737,2738,2739,2742,2743,2746,2747,2750],{},"The cron daemon runs as ",[14,2740,2741],{},"root",", which reads ",[14,2744,2745],{},"/root/.config/rclone/rclone.conf",". If you want cron to run as a specific user, set ",[14,2748,2749],{},"HOME=/home/username"," at the top of the crontab.",[10,2752,2753,2688,2756,2497],{},[25,2754,2755],{},"macOS (launchd):",[14,2757,2758],{},"~/Library/LaunchAgents/com.user.rclone.plist",[226,2760,2764],{"className":2761,"code":2762,"language":2763,"meta":231,"style":231},"language-xml shiki shiki-themes github-light github-dark","\u003C?xml version=\"1.0\" encoding=\"UTF-8\"?>\n\u003C!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\"\n  \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n\u003Cplist version=\"1.0\">\n\u003Cdict>\n  \u003Ckey>Label\u003C/key>\n  \u003Cstring>com.user.rclone\u003C/string>\n  \u003Ckey>ProgramArguments\u003C/key>\n  \u003Carray>\n    \u003Cstring>/usr/local/bin/rclone\u003C/string>\n    \u003Cstring>sync\u003C/string>\n    \u003Cstring>/path/to/data\u003C/string>\n    \u003Cstring>hummingtribe:your-bucket-name/data\u003C/string>\n    \u003Cstring>--log-file\u003C/string>\n    \u003Cstring>/tmp/rclone.log\u003C/string>\n  \u003C/array>\n  \u003Ckey>StartCalendarInterval\u003C/key>\n  \u003Cdict>\n    \u003Ckey>Hour\u003C/key>\n    \u003Cinteger>2\u003C/integer>\n    \u003Ckey>Minute\u003C/key>\n    \u003Cinteger>0\u003C/integer>\n  \u003C/dict>\n\u003C/dict>\n\u003C/plist>\n","xml",[14,2765,2766,2771,2776,2781,2786,2791,2796,2802,2808,2814,2820,2826,2832,2838,2844,2850,2856,2862,2868,2874,2880,2886,2892,2898,2904],{"__ignoreMap":231},[235,2767,2768],{"class":237,"line":238},[235,2769,2770],{},"\u003C?xml version=\"1.0\" encoding=\"UTF-8\"?>\n",[235,2772,2773],{"class":237,"line":262},[235,2774,2775],{},"\u003C!DOCTYPE plist PUBLIC \"-//Apple//DTD PLIST 1.0//EN\"\n",[235,2777,2778],{"class":237,"line":273},[235,2779,2780],{},"  \"http://www.apple.com/DTDs/PropertyList-1.0.dtd\">\n",[235,2782,2783],{"class":237,"line":284},[235,2784,2785],{},"\u003Cplist version=\"1.0\">\n",[235,2787,2788],{"class":237,"line":295},[235,2789,2790],{},"\u003Cdict>\n",[235,2792,2793],{"class":237,"line":795},[235,2794,2795],{},"  \u003Ckey>Label\u003C/key>\n",[235,2797,2799],{"class":237,"line":2798},7,[235,2800,2801],{},"  \u003Cstring>com.user.rclone\u003C/string>\n",[235,2803,2805],{"class":237,"line":2804},8,[235,2806,2807],{},"  \u003Ckey>ProgramArguments\u003C/key>\n",[235,2809,2811],{"class":237,"line":2810},9,[235,2812,2813],{},"  \u003Carray>\n",[235,2815,2817],{"class":237,"line":2816},10,[235,2818,2819],{},"    \u003Cstring>/usr/local/bin/rclone\u003C/string>\n",[235,2821,2823],{"class":237,"line":2822},11,[235,2824,2825],{},"    \u003Cstring>sync\u003C/string>\n",[235,2827,2829],{"class":237,"line":2828},12,[235,2830,2831],{},"    \u003Cstring>/path/to/data\u003C/string>\n",[235,2833,2835],{"class":237,"line":2834},13,[235,2836,2837],{},"    \u003Cstring>hummingtribe:your-bucket-name/data\u003C/string>\n",[235,2839,2841],{"class":237,"line":2840},14,[235,2842,2843],{},"    \u003Cstring>--log-file\u003C/string>\n",[235,2845,2847],{"class":237,"line":2846},15,[235,2848,2849],{},"    \u003Cstring>/tmp/rclone.log\u003C/string>\n",[235,2851,2853],{"class":237,"line":2852},16,[235,2854,2855],{},"  \u003C/array>\n",[235,2857,2859],{"class":237,"line":2858},17,[235,2860,2861],{},"  \u003Ckey>StartCalendarInterval\u003C/key>\n",[235,2863,2865],{"class":237,"line":2864},18,[235,2866,2867],{},"  \u003Cdict>\n",[235,2869,2871],{"class":237,"line":2870},19,[235,2872,2873],{},"    \u003Ckey>Hour\u003C/key>\n",[235,2875,2877],{"class":237,"line":2876},20,[235,2878,2879],{},"    \u003Cinteger>2\u003C/integer>\n",[235,2881,2883],{"class":237,"line":2882},21,[235,2884,2885],{},"    \u003Ckey>Minute\u003C/key>\n",[235,2887,2889],{"class":237,"line":2888},22,[235,2890,2891],{},"    \u003Cinteger>0\u003C/integer>\n",[235,2893,2895],{"class":237,"line":2894},23,[235,2896,2897],{},"  \u003C/dict>\n",[235,2899,2901],{"class":237,"line":2900},24,[235,2902,2903],{},"\u003C/dict>\n",[235,2905,2907],{"class":237,"line":2906},25,[235,2908,2909],{},"\u003C/plist>\n",[10,2911,2912],{},"Load the agent:",[226,2914,2916],{"className":228,"code":2915,"language":230,"meta":231,"style":231},"launchctl load ~/Library/LaunchAgents/com.user.rclone.plist\n",[14,2917,2918],{"__ignoreMap":231},[235,2919,2920,2923,2926],{"class":237,"line":238},[235,2921,2922],{"class":241},"launchctl",[235,2924,2925],{"class":245}," load",[235,2927,2928],{"class":245}," ~/Library/LaunchAgents/com.user.rclone.plist\n",[10,2930,2931,2934,2935,2938],{},[25,2932,2933],{},"Windows (Task Scheduler):"," Open Task Scheduler → Create Basic Task → Trigger: Daily at 02:00 → Action: Start a program → Program: ",[14,2936,2937],{},"C:\\Program Files\\rclone\\rclone.exe"," → Arguments:\nsync C:\\path\\to\\data hummingtribe:your-bucket-name/data --log-file C:\\rclone.log",[127,2940,2942],{"id":2941},"_8-verify-and-restore","8. Verify and restore",[10,2944,2945],{},"Compare source and destination to confirm integrity:",[226,2947,2949],{"className":228,"code":2948,"language":230,"meta":231,"style":231},"rclone check /path/to/data hummingtribe:your-bucket-name/data\n",[14,2950,2951],{"__ignoreMap":231},[235,2952,2953,2955,2958,2960],{"class":237,"line":238},[235,2954,2351],{"class":241},[235,2956,2957],{"class":245}," check",[235,2959,2481],{"class":245},[235,2961,2962],{"class":245}," hummingtribe:your-bucket-name/data\n",[10,2964,2965],{},"For a stricter check that downloads and hashes every file:",[226,2967,2969],{"className":228,"code":2968,"language":230,"meta":231,"style":231},"rclone check /path/to/data hummingtribe:your-bucket-name/data --download\n",[14,2970,2971],{"__ignoreMap":231},[235,2972,2973,2975,2977,2979,2981],{"class":237,"line":238},[235,2974,2351],{"class":241},[235,2976,2957],{"class":245},[235,2978,2481],{"class":245},[235,2980,2484],{"class":245},[235,2982,2983],{"class":258}," --download\n",[10,2985,2986],{},"Restore files by copying from the remote back to local disk:",[226,2988,2990],{"className":228,"code":2989,"language":230,"meta":231,"style":231},"rclone copy hummingtribe:your-bucket-name/data /path/to/restore --progress\n",[14,2991,2992],{"__ignoreMap":231},[235,2993,2994,2996,2998,3000,3003],{"class":237,"line":238},[235,2995,2351],{"class":241},[235,2997,2478],{"class":245},[235,2999,2484],{"class":245},[235,3001,3002],{"class":245}," /path/to/restore",[235,3004,2487],{"class":258},[10,3006,3007],{},"To restore a single file:",[226,3009,3011],{"className":228,"code":3010,"language":230,"meta":231,"style":231},"rclone copy hummingtribe:your-bucket-name/data/report.pdf /path/to/restore\n",[14,3012,3013],{"__ignoreMap":231},[235,3014,3015,3017,3019,3022],{"class":237,"line":238},[235,3016,2351],{"class":241},[235,3018,2478],{"class":245},[235,3020,3021],{"class":245}," hummingtribe:your-bucket-name/data/report.pdf",[235,3023,3024],{"class":245}," /path/to/restore\n",[10,3026,1753,3027,44],{},[1267,3028,1371],{"href":1370},[1273,3030,3031],{},"html pre.shiki code .sScJk, html code.shiki .sScJk{--shiki-default:#6F42C1;--shiki-dark:#B392F0}html pre.shiki code .sZZnC, html code.shiki .sZZnC{--shiki-default:#032F62;--shiki-dark:#9ECBFF}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .szBVR, html code.shiki .szBVR{--shiki-default:#D73A49;--shiki-dark:#F97583}html pre.shiki code .sj4cs, html code.shiki .sj4cs{--shiki-default:#005CC5;--shiki-dark:#79B8FF}",{"title":231,"searchDepth":262,"depth":262,"links":3033},[3034,3035,3036,3037,3038,3039,3040,3041],{"id":2253,"depth":273,"text":2254},{"id":1363,"depth":273,"text":1364},{"id":2367,"depth":273,"text":2368},{"id":2416,"depth":273,"text":2417},{"id":2459,"depth":273,"text":2460},{"id":2547,"depth":273,"text":2548},{"id":2681,"depth":273,"text":2682},{"id":2941,"depth":273,"text":2942},"Set up rclone for scripted sync, copy, and transfer to HummingTribe S3 on Linux, macOS, and Windows. Configure remotes, automate with cron, and verify transfers.",{},"/docs/rclone-eu-s3-setup",{"title":2245,"description":3042},{"loc":3044},"docs/rclone-eu-s3-setup",[1308,1309,1311,2351,3049,1777,1776],"linux","jGv7aBGRHMhAco8JvmjQImseD3PHtI6rjfRRLZO1jI4",1776858558287]