Encrypted backups

Scheduled, encrypted backups of your servers' folders.

K2Shell runs tar over SSH at the lowest priority, encrypts the stream with AES-256-GCM, and stores it where you choose.

k2shell

Job       nightly-www
Server    web-1
Folders   /var/www  /etc/nginx
Schedule  daily at 03:00 UTC
Keep      14 copies
Store     S3 bucket  backups/k2shell/

03:00:02  started  · nice 19 · ionice idle · 20 MB/s cap
03:04:41  ok       · 1.8 GB encrypted · 13 older copies kept

What you get

Gentle on servers

Lowest CPU and disk priority and a 20 MB/s read cap, so production keeps running.

Encrypted before storage

Each run gets its own key derived from the server's master key.

Your choice of storage

This app's disk, any S3-compatible bucket, or another enrolled server over SFTP.

Schedules

Hourly, daily, weekly or by hand, keeping the last N copies.

Easy restore

Download any run as a plain .tar.gz, decrypted on the way out.

The app too

K2Shell's own database is snapshotted and encrypted every day.