restic -r /srv/backups backup /home

restic / Borg Backup Builder

Both tools do the same job with different syntax. Pick one, set the repository and paths, and get init, backup, prune, and restore commands that agree with each other.

Local path, sftp:user@host:/path, or s3:s3.amazonaws.com/bucket
Space separated patterns.
Retention
Backup command
Init, retention, restore, schedule

A backup you have never restored is a hypothesis

The failure mode is always the same: backups run for two years, nobody tests them, and the restore fails when it matters. Schedule a real restore to a scratch directory at least twice a year, and use check --read-data or borg check so the data is verified rather than just the index. The other rule worth following is the offsite one: a backup on a disk in the same machine survives a bad update, not a fire, a theft, or ransomware that walks the mount points.

Build restic and BorgBackup commands

This backup command builder generates matching init, backup, retention, restore, and verification commands for restic and BorgBackup. It covers exclude patterns, compression levels, tags and archive naming, keep-daily and keep-monthly policies, and the details each tool handles differently, including Borg needing compact after prune to actually free space and restic reading its password from a file for unattended runs.

Backup FAQ

restic or Borg?

restic talks to S3, Backblaze B2, Azure, and SFTP natively, so it is the answer if your target is object storage. Borg requires the repository to be local or reachable over SSH with Borg installed at the far end, and in exchange usually compresses better and can run in append-only mode. Both encrypt by default and both are excellent.

Why has my repository not shrunk after pruning?

With Borg, prune only marks archives for removal; borg compact is what reclaims the disk space. With restic, forget without --prune does the same thing. Running the retention command and expecting space back without the second step is the most common surprise in both tools.

How do I run this on a schedule?

A systemd timer, not cron, because you get journal entries, exit codes, and Persistent catch-up if the machine was off. The systemd timer builder generates both units. Point the service at a small wrapper script that runs backup, then forget, then prune.

Is syncing to cloud storage a backup?

No. rclone or a sync client mirrors the current state, so a deletion, corruption, or encryption by ransomware propagates to the copy. A backup keeps history you can go back through. A common good pattern is restic to a local repository, then rclone to push that repository offsite.

More Linux command tools

Crontab Generator Build cron schedule expressions visually, with plain-English previews of when your job will run. tar Builder Compose tar archive and extract commands with the right compression flags, without memorizing xvzf incantations. systemd Unit Builder Generate systemd service files with restart policies, dependencies, and sandboxing options. chmod / chown Builder Work out permission octals and ownership commands with a visual rwx matrix. rsync Builder Build rsync sync and backup commands with delete safety, excludes, and SSH transport options. SSH Config Builder Generate ~/.ssh/config host blocks with keys, jump hosts, and connection keepalives. find Builder Compose find commands with type, name, time, and size filters, plus prune lists and safe actions. /etc/fstab Builder Build fstab mount lines with the right options, dump, and pass ordering for disks and network shares. OpenSSL CSR Builder Generate certificate signing request commands with subject fields and SAN entries filled in. journalctl Query Builder Compose systemd journal queries with unit, boot, priority, time-range, and grep filters. docker run Builder Build docker run commands with ports, volumes, env vars, and restart policies. Podman-compatible. ufw Rule Builder Build ufw firewall rules with allow/deny/limit actions, source restrictions, and comments. systemd Timer Builder Generate paired .timer and .service units with OnCalendar schedules, persistence, and randomised delay. WireGuard Config Generator Produce matching server and peer configs with AllowedIPs, DNS, keepalive, and NAT forwarding rules. Reverse Proxy Config Builder Write nginx or Caddy config for a self-hosted service, with TLS, WebSockets, and forwarded headers. Docker Compose Generator Build a docker-compose.yml with volumes, environment, ports, restart policy, and healthcheck. nftables Rule Builder Generate nftables rules and a stateful starter ruleset for the inet filter table. Samba and NFS Share Builder Create an smb.conf share block or an /etc/exports line, with the client mount commands. useradd / usermod Builder Build user creation and modification commands without accidentally wiping group membership. sed Command Builder Compose substitution, deletion, and insertion commands with safe in-place editing and backups. LVM Command Builder Get the full command sequence for creating, extending, and snapshotting logical volumes. tcpdump Filter Builder Assemble BPF capture filters by host, port, and protocol, with rotation and Wireshark output. dd Bootable USB Builder Write an ISO to a USB drive, with the device identification and checksum checks to run first. ffmpeg Command Builder Convert, compress, trim, scale, and extract audio with the arguments in the right order. umask Calculator See what a umask produces for new files and directories, and where to set it persistently. GPG Command Builder Verify signed downloads, generate keys, and sign files or git commits without guessing flags. Subnet Calculator Work out network, broadcast, host range, and masks for any IPv4 or IPv6 CIDR block, and split networks into subnets. curl Command Builder Build curl requests with methods, headers, JSON or form bodies, uploads, auth, retries, and timeouts. ssh-keygen Builder Generate Ed25519, RSA, or FIDO2 security key SSH keys, then install them with ssh-copy-id. sudoers Rule Builder Write sudoers.d rules with run-as targets, NOPASSWD, and limited command lists, validated with visudo. logrotate Config Generator Generate /etc/logrotate.d files with rotation schedules, retention, compression, and postrotate reloads. Podman Quadlet Generator Turn a container into a systemd service with a Quadlet .container file, rootless or rootful. Netplan Config Generator Write Netplan YAML for static IPs, DHCP, bridges, and VLANs on Ubuntu, applied safely with netplan try. grep Command Builder Build recursive grep searches with regex modes, context lines, and include or exclude filters, plus the ripgrep equivalent.

View all tools →