| 
					
				 | 
			
			
				@@ -12,8 +12,8 @@ Container image for creating cron-scheduled backups with [borg backup](https://w 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				   - Build: Run `docker compose build` to build the container image from `./build/Dockerfile` 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				   - Configuration: `cp .env.template .env ` and adapt `.env` (parameters are explained in the template file) 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				   - Init the backup archive: `docker exec --rm -it borg bash -c "borg init --encryption repokey-blake2"` 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				-  - Start the container: `docker-compose up -d` 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				-  - Upgrade: Alpine and borg version are hard-coded in `docker-compose.yml` so we don't mess up backups due to version upgrades 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+  - Start the container: `docker compose up -d` 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+  - Upgrade: Alpine and Borg versions are hard-coded in `docker-compose.yml`. [Borg Release Notes](https://github.com/borgbackup/borg/releases) should be consulted prior to upgrades. 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				  
			 | 
		
	
		
			
				 | 
				 | 
			
			
				 ## Preparation for disaster recovery  
			 | 
		
	
		
			
				 | 
				 | 
			
			
				 Very important: The following files MUST be stored along with the backup to enable decryption of the backup data 
			 | 
		
	
	
		
			
				| 
					
				 | 
			
			
				@@ -29,7 +29,7 @@ Very important: The following files MUST be stored along with the backup to enab 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				   6. Start the backup container: `docker-compose up -d` 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				  
			 | 
		
	
		
			
				 | 
				 | 
			
			
				 ## Monitoring 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				-  - Status and statistics are sent to Prometheus push-gateway using a simple bash-script and curl 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				+  - Status and statistics are sent to Prometheus Push-Gateway using a simple bash-script and curl 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				  
			 | 
		
	
		
			
				 | 
				 | 
			
			
				 ## Security considerations 
			 | 
		
	
		
			
				 | 
				 | 
			
			
				   - This container will run with root priveliges in order to access all data for backup. 
			 |