restor/env.example.env at main · dombyte/restor · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
# ====================================================
# Restic Repository Authentication
# ====================================================
# Choose ONE method for restic repository password.
# NEVER use more than one method simultaneously.
#
# Method 1: Direct password (NOT RECOMMENDED for production)
# Use only for testing or with proper file permissions
# RESTIC_PASSWORD=your-very-secret-password

# Method 2: Password file path (RECOMMENDED for production)
# Create a separate file with only the password (no newline at end)
# Set permissions: chmod 600 /etc/restor/restic-password
RESTIC_PASSWORD_FILE=/etc/restor/restic-password

# Method 3: Password from command (alternative)
# Uncomment and set to a command that outputs the password
# RESTIC_PASSWORD_COMMAND="cat /etc/restor/restic-password"

# ====================================================
# AWS S3 / S3-Compatible Storage Providers
# ====================================================
# AWS S3 Credentials
AWS_ACCESS_KEY_ID=AKIAIOSFODNN7EXAMPLE
AWS_SECRET_ACCESS_KEY=wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
AWS_DEFAULT_REGION=us-east-1

# Alternative: Reference system environment variables (if already set)
# This is useful when running restor under a user that already has AWS credentials
# AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID}
# AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY}
# AWS_DEFAULT_REGION=${AWS_DEFAULT_REGION}

# Custom S3 Endpoints for S3-compatible storage providers:
# Uncomment the appropriate line for your provider

# MinIO (self-hosted S3-compatible storage)
# S3_ENDPOINT=https://minio.yourdomain.com
# S3_ENDPOINT_PORT=443

# DigitalOcean Spaces
# S3_ENDPOINT=https://nyc3.digitaloceanspaces.com

# Wasabi Hot Cloud Storage
# S3_ENDPOINT=https://s3.wasabisys.com

# Backblaze B2 (use b2: backend instead of s3:)
# B2_ACCOUNT_ID=your-account-id
# B2_ACCOUNT_KEY=your-account-key

#
# ====================================================
# SFTP / SSH Backend
# ====================================================
# For sftp: user@host:/path/to/repo backend
# SFTP_USERNAME=backup-user
# SFTP_PASSWORD=your-sftp-password
# SFTP_HOST=backup-server.example.com
# SFTP_PORT=22

# Alternative: SSH key authentication (set SFTP_PASSWORD to empty)
# SFTP_USERNAME=backup-user
# SFTP_HOST=backup-server.example.com
# SFTP_PORT=22
# SFTP_PASSWORD=""  # Leave empty for key-based auth