Proxmox Offsite Backup
Encrypted and Actually Offsite

Proxmox Backup Server is excellent for local VM snapshots and deduplication. But local backups aren't offsite backups. ServerCrate gives your Proxmox environment an encrypted offsite target via Restic over SFTP - protecting VM configs, LXC data, and critical files in a separate physical location.

The Gap in Most Proxmox Backup Setups

A typical Proxmox homelab or small business setup uses Proxmox Backup Server (PBS) for VM and container snapshots. PBS is excellent - it handles deduplication efficiently, integrates with the Proxmox UI, and makes restoring VMs straightforward. But PBS is usually on the same physical hardware, or at best on the same local network.

That means a single event - power surge, drive failure, theft, house fire, or flooding - can take out both your Proxmox host and your PBS backup simultaneously. For a true offsite backup, you need your data stored in a physically separate location.

ServerCrate fills that gap: a remote encrypted vault in Los Angeles that receives your critical Proxmox data via Restic, independent of your local infrastructure.

What to Back Up from Proxmox with Restic

For most Proxmox homelab setups, the full VM disk images are too large to back up offsite with Restic efficiently. Instead, the practical approach is to use PBS for full VM snapshots locally, and use Restic to back up the things that are most painful to lose or rebuild:

  • Proxmox configuration:/etc/pve/ - contains all VM and LXC configs, network settings, storage definitions, and cluster config
  • Critical application data:Docker volumes, database files, app configs inside LXC containers
  • ZFS dataset contents:Data pools with files you can't regenerate - documents, code, media originals
  • PBS datastore metadata:The chunk index and manifest files that describe your PBS backups
  • SSL certificates and secrets:Certificates, private keys, and configuration secrets stored on the host
  • Custom scripts and automation:The infrastructure-as-code that would take hours to recreate

Setting Up Restic on Proxmox for Offsite Backup

Install Restic on the Proxmox host or inside a dedicated LXC container, then configure it to back up critical paths to your ServerCrate vault.

bash - Restic backup from Proxmox host
# Install Restic on Proxmox (Debian-based)
root@pve:~# apt install restic
 
# Set credentials from ServerCrate portal
root@pve:~# export RESTIC_REPOSITORY=sftp:vaultuser@vault.servercrate.net:22150:/data
root@pve:~# export RESTIC_PASSWORD=your-secret-token
root@pve:~# restic init
 
# Back up Proxmox config and critical data
root@pve:~# restic backup \
/etc/pve \
/etc/network \
/var/lib/pve-cluster \
/opt/servercrate \
/root/.ssh
snapshot a2f4e91c saved ✓

Backing Up LXC Container Data with Restic

For LXC containers running services you care about - databases, web apps, monitoring stacks - you can back up the container's data directory directly from the Proxmox host, or run Restic inside the container itself.

Running Restic inside the container is often cleaner, especially if the container has application-specific pre-backup hooks (like running a database dump before the backup). Each container gets its own Restic repository or you can multiplex multiple containers into one vault using different backup paths.

Proxmox + PBS + ServerCrate: The Complete Strategy

The recommended three-tier backup strategy for Proxmox homelab environments:

  • Tier 1 - PBS local:Full VM and LXC snapshots using Proxmox Backup Server on local storage. Fast recovery of entire VMs. Runs nightly.
  • Tier 2 - PBS offsite (optional):A second PBS instance at a different location, or ZFS replication to an offsite Proxmox node. Protects full VM images offsite.
  • Tier 3 - Restic to ServerCrate:Critical config files, application data, and key files backed up to an encrypted ServerCrate vault via Restic. Fast to set up, cheap, and provides encrypted offsite protection for the most important data.

Tier 3 via ServerCrate is where most homelab setups benefit most - it's the fastest to implement, requires no additional hardware, and ensures your most critical configs and data survive any single-site disaster.

Pricing

For most Proxmox setups backing up configs, secrets, and application data (rather than full disk images), the Starter or Standard plan is sufficient.

  • Free:10 GB - enough for config files and small datasets
  • Starter ($5/mo):100 GB - covers configs + small app data
  • Standard ($15/mo):500 GB, 3 devices - covers a full homelab
  • Pro ($29/mo):1 TB, 5 devices - large homelab or small business

Automating Proxmox Offsite Backup with systemd

Once Restic is configured on your Proxmox host, automate it with a systemd timer. Create /etc/systemd/system/restic-offsite.service that sources credentials and runs the backup, plus a matching .timer with OnCalendar=daily and Persistent=true. The Persistent flag is important for homelab setups where the host may not run 24/7 - the backup fires on next boot if it missed the window. See the systemd timer guide for full unit file examples.

Frequently Asked Questions

No. Use Proxmox Backup Server for full local VM snapshots. Use Restic with ServerCrate for critical files that are most painful to lose: /etc/pve, application data inside LXC containers, database dumps, and custom scripts. These are small enough for efficient offsite transfer.
Both work. Host-level Restic backs up /etc/pve and host configs cleanly. Per-container Restic lets you run pre-backup hooks like database dumps. Many setups use both: host Restic for Proxmox configs, per-container Restic for application data.
For configs and application data (not full VM images), most homelab setups fit in 10-50 GB even with 30-60 days of snapshots thanks to Restic deduplication. The Free plan covers minimal config backup. Starter (100 GB) covers configs plus LXC data. Standard (500 GB, 3 devices) covers a full multi-node homelab.
Yes. Each Proxmox node runs Restic independently and backs up to the same ServerCrate vault using different paths, or use separate vaults on Standard/Pro. The cluster configuration in /etc/pve is synchronized across nodes, so backing up from any one node covers the cluster config.

Related guides

Homelab Backup Storage Restic Proxmox Guide Systemd Timer Offsite Backup Server

Add offsite backup to your Proxmox setup

Free plan gets you started. No credit card, vault ready in seconds.

Start Free Homelab Backup Guide