Borg Backup

List Backups

export BORG_PASSPHRASE="$(cat ~/.config/borg/metabase-passphrase)"
borg list ssh://[email protected]/var/backups/borg/metabase

Backup Info

export BORG_PASSPHRASE="$(cat ~/.config/borg/metabase-passphrase)"
borg info ssh://[email protected]/var/backups/borg/metabase::metabase-latest

Restore Operations

List Archive Contents

export BORG_PASSPHRASE="$(cat ~/.config/borg/metabase-passphrase)"
borg list ssh://[email protected]/var/backups/borg/metabase::<archive-name>

Extract Specific Archive

export BORG_PASSPHRASE="$(cat ~/.config/borg/metabase-passphrase)"

# Extract to temp directory
mkdir -p /tmp/metabase-restore
cd /tmp/metabase-restore
borg extract ssh://[email protected]/var/backups/borg/metabase::<archive-name>

Extract Specific Files

export BORG_PASSPHRASE="$(cat ~/.config/borg/metabase-passphrase)"
borg extract \
    ssh://[email protected]/var/backups/borg/metabase::<archive-name> \
    --paths /var/www/metabase/docker-compose.yml \
    --paths /var/www/metabase/.env

Verify Backups

Check Archive Integrity

export BORG_PASSPHRASE="$(cat ~/.config/borg/metabase-passphrase)"
borg check ssh://[email protected]/var/backups/borg/metabase

Extract and Verify

export BORG_PASSPHRASE="$(cat ~/.config/borg/metabase-passphrase)"

# Test extract to verify
borg extract --dry-run ssh://[email protected]/var/backups/borg/metabase::<archive-name>

Pruning (Delete Old Backups)

export BORG_PASSPHRASE="$(cat ~/.config/borg/metabase-passphrase)"

# Keep daily backups for 7 days
# Keep weekly backups for 4 weeks
# Keep monthly backups for 6 months
borg prune \
    ssh://[email protected]/var/backups/borg/metabase \
    --keep-daily=7 \
    --keep-weekly=4 \
    --keep-monthly=6

Compression

Borg uses default lz4 compression. For better compression:

borg create --compression zstd ...

Troubleshooting

"Connection refused"

# Check SSH connection
ssh [email protected] "echo connected"

# Check backup directory exists
ssh [email protected] "ls /var/backups/borg/metabase"

"Passphrase incorrect"

# Verify passphrase
cat ~/.config/borg/metabase-passphrase

"Repository not found"

# Check if repo exists
ssh [email protected] "ls -la /var/backups/borg/"

Best Practices

1. Test restores - Regularly test extracting backups
2. Monitor failures - Set up alerts for failed backups
3. Prune old backups - Use borg prune to manage storage
4. Encrypt - All backups are encrypted with passphrase
5. Offsite - Backups are on remote server

Scripts

• /var/www/metabase/scripts/backup-metabase.sh - Main backup script
• /var/www/metabase/scripts/query-metabase.py - Query utilities