Skip to main content

Backup Strategy

Backup Tools​

ToolPurpose
resticEncrypted, versioned backups
rcloneCloud storage sync
rsyncFile synchronization
WP-CLIWordPress database export

Backup Schedule​

DataFrequencyRetentionDestination
WordPress filesDaily30 daysCloud storage (encrypted)
DatabaseDaily30 daysCloud storage (encrypted)
Full serverWeekly3 monthsCloud storage (encrypted)
ConfigurationPer changeIndefiniteGit repository

Backup Flow​

restic backup /var/www/opshell
  → Encrypt with restic key
    → Upload to cloud storage (rclone)
      → Prune old snapshots (30-day retention)
        → Verify latest snapshot
          → Notification on success/failure

Recovery Testing​

  • Monthly recovery drill for database restoration
  • Quarterly full server restore test
  • Documented recovery runbook
  • Backup integrity verified automatically after each backup

Critical Data​

PathContentBackup Priority
/home/wp_opshell_dev/sites/WordPress installationCritical
/etc/nginx/Nginx/OpenLiteSpeed configsHigh
/etc/cloudflared/Tunnel configurationHigh
/etc/systemd/Custom service definitionsMedium
/root/.ssh/SSH keys and configCritical