Documentation

Complete architectural guide, agent deployment, storage provider configuration, and disaster recovery reference.

Platform Overview & Cryptographic Architecture

Automated Backup provides continuous database discovery, client-side authenticated AES-256-GCM encryption, multi-destination cloud replication, and immutable audit logging.

Zero-Knowledge Encryption

Snapshots are encrypted at the agent level before leaving the host. Remote storage providers never receive unencrypted database dumps.

Atomic Stream Archiving

Pipes mysqldump, mariadb-dump, or pg_dump directly into gzip compression and encryption chunks, preventing large unencrypted temp files on host disks.

Minimum Copies Guard

Retention policies enforce the immutable rule: the platform never purges the last verified backup copy, even during aggressive cleanup windows.

Agent Installation & Host Enrollment

Enroll any Linux or Docker host using a single automated shell command. The installer provisions the dedicated backup-agent user, systemd service, and timer.

sudo backup-agent doctor
sudo backup-agent discover
sudo backup-agent run

Configuring Storage Destinations

Connect multiple independent storage destinations for simultaneous offsite replication and high availability.

Disaster Recovery & Standalone Restoration

Restore databases either through the unified web console or using the standalone offline CLI utility when the web dashboard is unreachable.

Enterprise Security & WebAuthn

Engineered with defense-in-depth security principles for critical production environments.

REST API & Automation Integration

Automate backup schedules, trigger manual jobs, and fetch fleet telemetry using standard HTTP REST endpoints.