2 # passed directly to duplicity
3 #options = --verbosity 8
5 # default is 0, but set to 19 if you want to lower the priority.
8 # default is yes. set to no to skip the test if the remote host is alive
11 ######################################################
13 ## (how to encrypt and optionnally sign the backups)
15 ## WARNING: old (pre-0.9.2) example.dup used to give wrong information about
16 ## the way the following options are used. Please read ahead
19 ## If the encryptkey variable is set:
20 ## - data is encrypted with the GnuPG public key specified by the encryptkey
22 ## - if signing is enabled, the password variable is used to unlock the GnuPG
23 ## private key used for signing; else, you do not need to set the password
25 ## If the encryptkey option is not set:
26 ## - data signing is not possible
27 ## - the password variable is used to encrypt the data with symmetric
28 ## encryption: no GnuPG key pair is needed
32 # when set to yes, encryptkey variable must be set bellow; if you want to use
33 # two different keys for encryption and signing, you must also set the signkey
35 # default is no, for backward compatibility with backupninja <= 0.5.
38 # ID of the GnuPG public key used for data encryption.
39 # if not set, symmetric encryption is used, and data signing is not possible.
42 # ID of the GnuPG private key used for data signing.
43 # if not set, encryptkey will be used.
47 # NB: do not quote it, and it should not contain any quote
48 password = a_very_complicated_passphrase
50 ######################################################
52 ## (where the files to be backed up are coming from)
56 # files to include in the backup
57 # (supports globbing with '*')
59 # Symlinks are not dereferenced. Moreover, an include line whose path
60 # contains, at any level, a symlink to a directory, will only have the
61 # symlink backed-up, not the target directory's content. Yes, you have
62 # to dereference yourself the symlinks, or to use 'mount --bind'
65 # Let's say /home is a symlink to /mnt/crypt/home ; the following line
66 # will only backup a "/home" symlink ; neither /home/user nor
67 # /home/user/Mail will be backed-up :
68 # include = /home/user/Mail
69 # A workaround is to 'mount --bind /mnt/crypt/home /home' ; another
71 # include = /mnt/crypt/home/user/Mail
73 include = /var/spool/cron/crontabs
74 include = /var/backups
78 include = /usr/local/bin
79 include = /usr/local/sbin
80 include = /var/lib/dpkg/status
81 include = /var/lib/dpkg/status-old
83 # If vservers = yes in /etc/backupninja.conf then the following variables can
85 # vsnames = all | <vserver1> <vserver2> ... (default = all)
89 # Any path specified in vsinclude is added to the include list for each vserver
90 # listed in vsnames (or all if vsnames = all, which is the default).
92 # For example, vsinclude = /home will backup the /home directory in every
93 # vserver listed in vsnames. If you have 'vsnames = foo bar baz', this
94 # vsinclude will add to the include list /vservers/foo/home, /vservers/bar/home
95 # and /vservers/baz/home.
96 # Vservers paths are derived from $VROOTDIR.
97 # vsinclude supports globbing with '*'.
99 # files to exclude from the backup
100 # (supports globbing with '*')
101 exclude = /home/*/.gnupg
103 ######################################################
104 ## destination section
105 ## (where the files are copied to)
109 # perform an incremental backup? (default = yes)
110 # if incremental = no, perform a full backup in order to start a new backup set
113 # how many days of data to keep ; default is 60 days.
114 # (you can also use the time format of duplicity)
115 # 'keep = yes' means : do not delete old data, the remote host will take care of this
119 # bandwith limit, in kbit/s ; default is 0, i.e. no limit
120 #bandwidthlimit = 128
122 # passed directly to ssh and scp
123 sshoptions = -i /root/.ssh/id_dsa_duplicity
125 # put the backups under this directory
128 # the machine which will receive the backups
129 desthost = backuphost
131 # make the files owned by this user
132 # note: you must be able to ssh backupuser@backhost
133 # without specifying a password (if type = remote).
134 destuser = backupuser