1 ## This is an example duplicity configuration file.
3 ## Here you can find all the possible duplicity options, details of
4 ## what the options provide and possible settings. The defaults are set
5 ## as the commented out option, uncomment and change when
6 ## necessary. Options which are uncommented in this example do not have
7 ## defaults, and the settings provided are recommended.
9 ## passed directly to duplicity, e.g. to increase verbosity set this to:
10 ## options = --verbosity 8
15 ## default is 0, but set to something like 19 if you want to lower the priority.
20 ## test the connection? set to no to skip the test if the remote host is alive
25 ## temporary directory used by duplicity, set to some other location if your /tmp is small
26 ## default is either /tmp or /usr/tmp, depending on the system
31 ######################################################
33 ## (how to encrypt and optionally sign the backups)
35 ## WARNING: old (pre-0.9.4) example.dup used to give wrong information about
36 ## the way the following options are used. Please read the following
39 ## If the encryptkey variable is set:
40 ## - data is encrypted with the GnuPG public key specified by the encryptkey
42 ## - if signing is enabled, data is signed with the GnuPG private
43 ## key specified by the signkey variable
44 ## - the password variable is used to unlock the GnuPG key(s) used
45 ## for encryption and (optionnal) signing
47 ## If the encryptkey option is not set:
48 ## - data signing is not possible
49 ## - the password variable is used to encrypt the data with symmetric
50 ## encryption: no GnuPG key pair is needed
54 ## when set to yes, encryptkey variable must be set below; if you want to use
55 ## two different keys for encryption and signing, you must also set the signkey
57 ## default is set to no, for backwards compatibility with backupninja <= 0.5.
62 ## ID of the GnuPG public key used for data encryption.
63 ## if not set, symmetric encryption is used, and data signing is not possible.
64 ## an example setting would be:
65 ## encryptkey = 04D9EA79
70 ## ID of the GnuPG private key used for data signing.
71 ## if not set, encryptkey will be used, an example setting would be:
78 ## NB: neither quote this, nor should it contain any quotes,
79 ## an example setting would be:
80 ## password = a_very_complicated_passphrase
85 ######################################################
87 ## (where the files to be backed up are coming from)
91 ## A few notes about includes and excludes:
92 ## 1. include, exclude and vsinclude statements support globbing with '*'
93 ## 2. Symlinks are not dereferenced. Moreover, an include line whose path
94 ## contains, at any level, a symlink to a directory, will only have the
95 ## symlink backed-up, not the target directory's content. Yes, you have to
96 ## dereference yourself the symlinks, or to use 'mount --bind' instead.
97 ## Example: let's say /home is a symlink to /mnt/crypt/home ; the following
98 ## line will only backup a "/home" symlink ; neither /home/user nor
99 ## /home/user/Mail will be backed-up :
100 ## include = /home/user/Mail
101 ## A workaround is to 'mount --bind /mnt/crypt/home /home' ; another one is to
103 ## include = /mnt/crypt/home/user/Mail
104 ## 3. All the excludes come after all the includes. The order is not otherwise
105 ## taken into account.
107 ## files to include in the backup
108 include = /var/spool/cron/crontabs
109 include = /var/backups
113 include = /usr/local/bin
114 include = /usr/local/sbin
115 include = /var/lib/dpkg/status
116 include = /var/lib/dpkg/status-old
118 ## If vservers = yes in /etc/backupninja.conf then the following variables can
120 ## vsnames = all | <vserver1> <vserver2> ... (default = all)
121 ## vsinclude = <path>
122 ## vsinclude = <path>
124 ## Any path specified in vsinclude is added to the include list for each vserver
125 ## listed in vsnames (or all if vsnames = all, which is the default).
127 ## For example, vsinclude = /home will backup the /home directory in every
128 ## vserver listed in vsnames. If you have 'vsnames = foo bar baz', this
129 ## vsinclude will add to the include list /vservers/foo/home, /vservers/bar/home
130 ## and /vservers/baz/home.
131 ## Vservers paths are derived from $VROOTDIR.
133 # files to exclude from the backup
134 exclude = /home/*/.gnupg
136 ######################################################
137 ## destination section
138 ## (where the files are copied to)
142 ## perform an incremental backup? (default = yes)
143 ## if incremental = no, perform a full backup in order to start a new backup set
148 ## how many days of data to keep ; default is 60 days.
149 ## (you can also use the time format of duplicity)
150 ## 'keep = yes' means : do not delete old data, the remote host will take care of this
155 ## full destination URL, in duplicity format; if set, desturl overrides
156 ## sshoptions, destdir, desthost and destuser; it also disables testconnect and
157 ## bandwithlimit. For details, see duplicity manpage, section "URL FORMAT", some
159 ## desturl = file:///usr/local/backup
160 ## desturl = rsync://user@other.host//var/backup/bla
161 ## the default value of this configuration option is not set:
166 ## bandwith limit, in kbit/s ; default is 0, i.e. no limit an example
168 ## bandwidthlimit = 128
173 ## passed directly to ssh, scp (and sftp in duplicity >=0.4.2)
174 ## warning: sftp does not support all scp options, especially -i; as
175 ## a workaround, you can use "-o <SSHOPTION>"
176 ## an example setting would be:
177 ## sshoptions = -o IdentityFile=/root/.ssh/id_dsa_duplicity
182 ## put the backups under this directory, this must be set!
183 ## an example setting would be:
184 ## destdir = /backups
189 ## the machine which will receive the backups, this must be set!
190 ## an example setting would be:
191 ## desthost = backuphost
196 ## make the files owned by this user
197 ## note: you must be able to ssh backupuser@backhost
198 ## without specifying a password (if type = remote).
199 ## an example setting would be:
200 ## destuser = backupuser