Your files, your database and the configuration you would actually need to rebuild, on a schedule, into a vault we cannot read. Plus an email the day a backup stops running, so silence never gets mistaken for success.
No agent to install, no plugin with access to your database, no dashboard that needs a password to your site. Restic runs from cron, encrypts on your machine, and writes over SSH.
Two lines of that matter. 61 MiB stored for a 3.9 GiB site, because restic deduplicates and compresses. And snapshot 9d41f0be, which is the thing you name when you restore. If you cannot name a snapshot, you do not have a backup, you have a hope.
| Captured | Why it is in the set |
|---|---|
| Document root | Application code, themes, plugins and uploads. The part everyone remembers. |
| Database dump | Taken with a consistent transaction so the dump matches the files, not a half-written state. |
| Web server config | Vhosts and rewrites. Restoring files without these gives you a site that will not serve. |
| Certificates and cron | The small things that make a restore take an afternoon instead of ten minutes. |
| Environment | What it needs |
|---|---|
| Linux server | SSH access, a known document root, a dump command. |
| WordPress | Files, uploads, database, and wp-config. Runs from the host, not a plugin. |
| CloudPanel and similar panels | Site-aware paths; the job is per site rather than per server. |
| Several small sites | One vault, one place to see which one stopped running. |
A useful setup answers four questions without anyone guessing: when did the last successful backup run, what was in it, where is it stored, and how do we restore it. Most website backups fail at least two, and you find out the night the drive dies.
Backups that live inside the hosting account they protect are not backups. A compromised panel, a billing lapse or a deleted account takes both copies at once. Yours land in a separate vault, encrypted before they leave your machine, on infrastructure your host does not control.
We publish a real end-to-end restore on a schedule, with the snapshot ID and matching SHA-256 manifests. See the latest drill, with receipts.
If you would rather we hosted the site as well, backups are already included and there is nothing to configure. That is Website Hosting.