Kopia is a solid backup client. The Kopia Repository Server, though, is something you host yourself - hardware, updates, TLS, monitoring, the whole stack. ServerCrate is a fully managed alternative for encrypted offsite backup, optimized for Restic but equally usable with Kopia.
Kopia has two sides: the backup client (free, open source), and the Kopia Repository Server - a self-hosted component that acts as a gatekeeper between clients and underlying storage. You run the server, maintain it, issue client credentials, handle TLS, back up the server itself, and hope nothing breaks.
For a homelab or developer with three machines, this is a lot of operational overhead. The repository server is a useful component in multi-tenant corporate deployments. For personal or small-team backups, it is often overkill.
A managed encrypted backup target removes the server operation entirely. You run the backup client. The target is a hosted SFTP endpoint, backed by ZFS, with pre-provisioned encryption at the client level. No Kopia Repository Server to run.
ServerCrate is this kind of managed target. It is optimized for Restic, but Kopia speaks SFTP natively, so you can:
kopia repository create sftp \
--host=vault.servercrate.net \
--port=22150 \
--username=vaultuser \
--path=/data \
--keyfile=/root/.ssh/id_servercrate
The Kopia repository lives inside your ServerCrate vault. You get the Kopia tooling you like, without the Kopia server overhead.
The honest comparison:
| Dimension | Kopia Repository Server (self-hosted) | ServerCrate (managed) |
|---|---|---|
| Who runs the server | You | ServerCrate |
| Encryption | Client-side (Kopia encrypts) | Client-side (Restic or Kopia encrypts) |
| Zero-knowledge | Yes, by design | Yes, by design |
| Storage layer | Whatever you put under it | ZFS on dedicated nodes |
| Hardware you own | Yes | No |
| Monthly cost | Your hosting bill + electricity + time | From $5/mo |
| TLS / certs | You manage | SSH transport, no TLS to manage |
| Backup of the backup server | Your problem | Not applicable |
| Snapshots and history | Kopia handles | Restic or Kopia handles (plus ZFS snapshots on the server) |
| GUI | Kopia UI | Web portal for vault management; backup client chooses GUI or CLI |
| Supports Restic clients too | No (Kopia format is Kopia-only) | Yes (Restic-native) |
For those cases, the self-hosted path is correct. For everything else, a managed target is simpler, cheaper, and more reliable.
Kopia supports SFTP as a first-class storage backend. The configuration is straightforward:
# Create a Kopia repository on your ServerCrate vault
kopia repository create sftp \
--host=vault.servercrate.net \
--port=22150 \
--username=vaultuser \
--path=/data/kopia \
--password=your-kopia-password
# Set up policies as normal
kopia policy set --global \
--keep-latest 10 \
--keep-hourly 48 \
--keep-daily 14 \
--keep-weekly 8 \
--keep-monthly 12
# Back up
kopia snapshot create /home /etc /var/www
Kopia will layout its repository format inside /data/kopia in your vault. Restic can use the rest of the vault for a separate repository if you want to run both for comparison.
Honestly, very little for typical use cases. You do not have root on the storage host, so you cannot install arbitrary things there - but a backup target is not somewhere you want to run arbitrary things anyway. The smaller surface area is a feature.
Kopia's server-side access control (ACLs on specific paths within a repository) is a Kopia Repository Server feature. With SFTP, you get file-level access at the vault boundary, not path-level. For single-user or single-team vaults, this is not a limitation.
If you are running your own Kopia server and want to move:
Kopia does not have a native repository-to-repository migration tool. The practical approach is fresh snapshots on the new repository and retiring the old one once confidence is built.
Most people evaluating Kopia arrive there because they want encrypted, deduplicated, snapshot-based backup and Kopia is one of the three or four tools that does it well. If you are flexible on the client tool, Restic is slightly simpler operationally, has a larger community, and is what ServerCrate is primarily designed around. See our comparison of Restic alternatives for the full landscape.
If you decide Kopia is the right tool, here is what you're actually getting that Restic doesn't match:
And here is where Restic wins:
restic backup, restic restore, restic forget. That's almost the whole surface area.If you're backing up a large PostgreSQL or MySQL database, both Restic and Kopia will back up files correctly but neither handles live database state — you still need to pg_dump or use filesystem snapshots first. For VMware ESXi or Proxmox VMs with live guests, you likely want Proxmox Backup Server or Veeam for the hypervisor layer and Restic/Kopia only for the config and extracted data. Pick the backup tool that matches the data model, not the other way around.
/data/restic, /data/kopia) and they will not interfere. Each gets its own encryption key and deduplication scope. Storage usage is additive - there is no cross-tool dedup.Skip the server ops. Get a private SFTP vault backed by ZFS. Works with Kopia, Restic, Borg, or rsync. 10GB free to try.
No egress fees, cancel anytime, 7-day money-back guarantee