# 6: Borgmatic - Backup System (optional, but you should have backup)

Borgmatic is an automated backup system that keeps your data safe by creating encrypted, compressed backups of all your applications and databases. It's like having a digital safety net that automatically saves copies of everything important. For comprehensive configuration options and advanced features, please refer to the [official Borgmatic documentation](https://torsion.org/borgmatic/).

## What is Borgmatic? (Simple Explanation)

**Borgmatic** is like a smart, automated filing system that makes copies of all your important data. Think of it as having a personal assistant who:

- Makes copies of all your files and databases
- Compresses them to save space
- Encrypts them for security
- Keeps multiple versions (daily, weekly, monthly)
- Runs automatically on a schedule

**Why Borgmatic is essential:**

- ✅ **Data protection** - Your data is safe if something goes wrong
- ✅ **Automatic backups** - Runs without you remembering
- ✅ **Space efficient** - Only stores changes, not duplicates
- ✅ **Encrypted storage** - Your backups are secure
- ✅ **Easy recovery** - Restore files when you need them

**Think of it like this:** If your server was a house, Borgmatic would be like having a professional photographer who takes a complete photo of every room every day, stores the photos safely, and can help you rebuild the house exactly as it was if something happens.

### Interdependencies

**Required:** Borgmatic uses **Apprise** for notifications (success/failure/security alerts). Install Apprise first via *📱 APPLICATIONS → Apprise → Install*.

## Prerequisites

Before installing Borgmatic, make sure you have:

- ✅ **Infinity Tools installed** (from Chapter 2)
- ✅ **Docker running** (from Chapter 3)
- ✅ **Traefik installed** (from Chapter 4)
- ✅ **Apprise installed** (notifications dependency)
- ✅ **Storage space** - At least 2-3 times your data size

### Why These Prerequisites Matter

**Infinity Tools:** Provides the management interface for Borgmatic

**Docker:** Runs Borgmatic in a secure container

**Traefik:** Provides secure access to backup management

**Storage space:** Backups need somewhere to be stored

## Step 1: Start Infinity Tools

Make sure you're connected to your server via SSH, then start Infinity Tools:

```
sudo infinity-tools
```

### Using the Infinity Tools GUI

When you start Infinity Tools, you'll see the main menu. Look for the **💾 BACKUP MANAGEMENT** section - this is where Borgmatic is located.

- ✅ **Color-coded sections** - Backup tools have their own section
- ✅ **Clear descriptions** - Each tool shows what it does
- ✅ **Status indicators** - Shows if backup systems are running
- ✅ **Easy navigation** - Use arrow keys to move around

## Step 2: Navigate to Borgmatic

In the Infinity Tools menu:

1. Use your arrow keys to navigate to **💾 BACKUP MANAGEMENT**
2. Press **Enter** to open the Backup Management menu
3. Look for **Borgmatic** in the list
4. Select it and press **Enter**

### Understanding the Backup Management Section

The Backup Management section contains tools for protecting your data:

- 💾 **Borgmatic** - Automated backup system
- 📊 **Backup Status** - Check what's being backed up
- 🔧 **Backup Settings** - Configure backup options
- 📁 **Restore Data** - Recover files when needed

**Look for the turquoise cursor** - it shows what you're about to select!

## Step 3: Install Borgmatic

When you select Borgmatic, you'll see installation options. Choose **Install Borgmatic**.

### What Happens During Installation

Borgmatic installation will:

- Create a backup container
- Set up two backup schedules (files and databases)
- Configure encryption for security
- Set up automatic notifications
- Create security monitoring (canary files)

**This usually takes 3-5 minutes.**

## Step 4: Configure Borgmatic

During installation, you'll be asked several questions:

### Backup Schedule

You'll see a prompt like:

```
📅 Backup Schedule Configuration
=============================
How often should files be backed up?

1) Daily (default) - Once per day at 2:00 AM
2) Twice daily - Every 12 hours
3) Weekly - Once per week on Sunday
```

**For beginners:** Choose "1" (Daily) - This provides good protection without using too much storage.

### Retention Policy

You'll be asked how long to keep backups:

```
📦 Retention Policy
================
How long should backups be kept?

1) Conservative (default) - 7 daily, 4 weekly, 6 monthly
2) Aggressive - 14 daily, 8 weekly, 12 monthly
3) Minimal - 3 daily, 2 weekly, 3 monthly
```

**For beginners:** Choose "1" (Conservative) - This keeps enough backups for recovery without using too much space.

### Compression Settings

You'll be asked about compression:

```
🗜️  Compression Configuration
===========================
Choose compression algorithm:

1) zstd (default) - Best balance of speed and compression
2) lz4 - Fastest compression, larger files
3) zlib - Good compression, moderate speed
4) lzma - Best compression, slower
```

**For beginners:** Choose "1" (zstd) - This provides good compression without being too slow.

### Security Passphrase

You'll be asked to create a passphrase for your backups:

```
🔐 Security Configuration
======================
Enter a strong passphrase for backup encryption:
[Enter your passphrase]
```

**Important:** This passphrase encrypts your backups. Choose something strong and save it safely!

**Passphrase tips:**

- At least 12 characters long
- Mix of letters, numbers, and symbols
- Easy for you to remember
- Unique (don't use it anywhere else)

**Example:** `MyBackup@2024!Secure#Data`

## Step 5: Wait for Installation

After answering the questions, Borgmatic will install and start. You'll see messages like:

```
📦 Installing Borgmatic...
🔧 Creating backup configurations...
🔐 Setting up encryption...
🛡️  Creating security monitoring...
📅 Setting up schedules...
✅ Borgmatic installed successfully!
```

## Step 6: Understanding What Was Created

Borgmatic installation creates a sophisticated backup system with two types of backups:

### File Backups

These backup all your application files:

- **What's backed up:** All files in `/opt/speedbits/`
- **Schedule:** Daily (or your chosen frequency)
- **Retention:** 7 daily, 4 weekly, 6 monthly
- **Purpose:** Recover application configurations and data

### Database Backups

These backup all your databases:

- **What's backed up:** MariaDB, PostgreSQL, SQLite, MongoDB databases
- **Schedule:** Every 6 hours
- **Retention:** 48 hourly, 7 daily
- **Purpose:** Recover database data quickly

### Security Features

Borgmatic includes advanced security:

- ✅ **Encryption** - All backups are encrypted
- ✅ **Canary files** - Detects if your system is compromised
- ✅ **Notifications** - Alerts you about backup status
- ✅ **Deduplication** - Only stores changes, saving space

## Step 7: Verify Borgmatic is Working

Let's make sure Borgmatic is running properly.

### Check Status in Infinity Tools

In the Infinity Tools menu, go to:

- **📊 STATUS & HEALTH** → **STATUS**

You should see Borgmatic listed as "RUNNING" or "ACTIVE".

### Using the Status Dashboard

The Status & Health section shows you:

- ✅ **Service Status** - Which applications are running
- ✅ **System Health** - CPU, memory, and disk usage
- ✅ **Docker Info** - All your containers and their status
- ✅ **Backup Status** - When backups last ran

**Look for the green checkmarks** - they indicate everything is working properly!

### Check Backup Status

You can also check by going to:

- **💾 BACKUP MANAGEMENT** → **Backup Status**

This will show you:

- 📅 **Last Backup** - When backups last ran
- 📊 **Backup Size** - How much space backups use
- 🔐 **Encryption Status** - Whether backups are encrypted
- 📈 **Backup History** - Recent backup activity

## Step 8: Understanding Backup Storage

Borgmatic stores your backups in a special location:

### Backup Location

Your backups are stored in:

- `/opt/speedbits-backup/borgmatic-repo/` - Main backup repository
- This contains all your encrypted, compressed backups
- Each backup is stored as an "archive" with a timestamp

### Backup Structure

Your backup repository contains:

- 📁 **File Archives** - `speedbits-files-server-2024-01-15-020000`
- 📁 **Database Archives** - `speedbits-databases-server-2024-01-15-060000`
- 🔐 **Encryption Keys** - Secure keys for accessing backups
- 📊 **Metadata** - Information about each backup

## Step 9: Test Your First Backup

Let's run a test backup to make sure everything works:

### Manual Backup Test

In the Infinity Tools menu, go to:

- **💾 BACKUP MANAGEMENT** → **Run Manual Backup**

This will start a backup immediately and show you the progress.

### What You'll See

During the backup, you'll see messages like:

```
Starting SpeedBits file backup...
Creating archive speedbits-files-server-2024-01-15-143000...
Backing up /opt/speedbits/vaultwarden...
Backing up /opt/speedbits/traefik...
File backup completed successfully
```

### Understanding Backup Progress

The backup process shows:

- 📁 **Files being backed up** - What's currently being processed
- 📊 **Progress indicators** - How much is complete
- ⏱️ **Time estimates** - How long it will take
- ✅ **Completion status** - When it's finished

## What's Next?

Congratulations! You now have an automated backup system protecting all your data.

### What You've Accomplished

- ✅ **Installed Borgmatic** - Automated backup system
- ✅ **Configured encryption** - Your backups are secure
- ✅ **Set up schedules** - Backups run automatically
- ✅ **Enabled monitoring** - You'll know if something goes wrong
- ✅ **Protected your data** - Everything is safely backed up

### Next Steps

Now you can:

- Install more applications - They'll be automatically backed up
- Monitor backup status - Check that backups are running
- Test recovery - Practice restoring files when needed
- Set up notifications - Get alerts about backup status

## Troubleshooting

### Backup Not Running

If backups aren't running:

- Check that Borgmatic container is running: `docker ps | grep borgmatic`
- Check backup logs: `docker logs borgmatic`
- Verify there's enough disk space
- Check that applications are installed to backup

### Backup Fails

If backups fail:

- Check disk space - Backups need free space
- Verify passphrase is correct
- Check file permissions
- Look at error messages in the logs

### Can't Access Backups

If you can't access your backups:

- Make sure you have the correct passphrase
- Check that the backup repository exists
- Verify file permissions on backup directory
- Try running a manual backup to test

## Quick Reference

**Check Borgmatic status:**

```
docker ps | grep borgmatic
```

**View backup logs:**

```
docker logs borgmatic
```

**Run manual backup:**

```
docker exec borgmatic borgmatic --config /etc/borgmatic/borgmatic-files.yml create
```

**List all backups:**

```
docker exec borgmatic borg list /backups/borgmatic-repo
```

## You're Ready!

Borgmatic is now installed and protecting your data! You have a professional-grade backup system that runs automatically and keeps your data safe.

**What you accomplished:**

- ✅ Installed and configured Borgmatic
- ✅ Set up encrypted, automated backups
- ✅ Protected all your applications and data
- ✅ Enabled monitoring and notifications

**Next step:** You can now install your first application (Vaultwarden) knowing it will be automatically backed up and protected!

## What You Learned

- **Borgmatic** - An automated backup system for data protection
- **Backup Strategies** - How to protect files and databases
- **Encryption** - How to keep backups secure
- **Automation** - How to set up hands-off data protection
- **Monitoring** - How to ensure backups are working

You now have enterprise-grade data protection running on your server!

---

*Next: Installing Vaultwarden - Your Password Manager (Chapter 7)*