Netgrimoire/nextcloud_backup.md
2026-02-15 00:11:17 +00:00

972 lines
26 KiB
Markdown

---
title: Nextcloud Backup
description: Native + Kopia
published: true
date: 2026-02-15T00:11:07.746Z
tags:
editor: markdown
dateCreated: 2026-02-14T23:52:25.405Z
---
# Nextcloud AIO Backup and Recovery Guide
## Overview
This document provides comprehensive backup and recovery procedures for Nextcloud All-in-One (AIO). Nextcloud AIO includes a **built-in BorgBackup solution** that handles database, files, and configuration. We enhance this with Kopia for offsite storage in vaults, following the same two-tier approach used for Mailcow and Immich.
## Quick Reference
### Important: Borg Backup password: 0c038ada7a620e59802f43422b6fea409b46bab8821be6d3
### Common Backup Commands
```bash
# Run automated backup script
/opt/scripts/backup-nextcloud.sh
# Trigger AIO backup manually (via web interface)
# Navigate to: https://your-server:8080 → Backup section → Create Backup
# List Kopia snapshots
kopia snapshot list --tags nextcloud
# View backup logs
tail -f /var/log/nextcloud-backup.log
# Check AIO backup status
docker exec -it nextcloud-aio-mastercontainer bash
ls -lh /mnt/docker-aio-config/data/borg/
```
### Common Restore Commands
```bash
# Restore using AIO's built-in interface (RECOMMENDED)
# Navigate to: https://your-server:8080 → Backup section → Restore
# Restore from Kopia to new server
kopia snapshot list --tags nextcloud
kopia restore <snapshot-id> /opt/nextcloud-backups/
# Check container status after restore
docker ps | grep nextcloud
docker logs -f nextcloud-aio-mastercontainer
```
## Critical Components to Backup
### 1. Nextcloud AIO BorgBackup Repository
- **Location**: Docker volume `nextcloud_aio_mastercontainer``/mnt/docker-aio-config/data/borg/`
- **Contains**:
- Complete database (PostgreSQL)
- All user files and data
- Nextcloud configuration
- Apps and their data
- **Importance**: This is Nextcloud AIO's primary backup - contains everything needed for restore
### 2. Nextcloud Data Directory
- **Location**: `/srv/NextCloud-AIO` (per your NEXTCLOUD_DATADIR setting)
- **Purpose**: User files, photos, documents
- **Note**: Already included in AIO BorgBackup, but can be backed up separately with Kopia
### 3. AIO Mastercontainer Volume
- **Volume**: `nextcloud_aio_mastercontainer`
- **Contains**: AIO configuration, certificates, Borg repository
- **Critical**: Required to restore AIO itself
### 4. Docker Compose Configuration
- **Location**: `/opt/nextcloud/docker-compose.yml`
- **Purpose**: Container definitions, network settings, environment variables
- **Importance**: Needed to recreate the AIO setup
### 5. Additional Components
- **Apache Port**: 11000 (your custom port)
- **AIO Admin Interface**: Port 8080
- **Networks**: `netgrimoire` external network
## Backup Strategy
### Two-Tier Backup Approach
We use a **two-tier approach** combining Nextcloud AIO's native BorgBackup with Kopia for offsite storage:
1. **Tier 1 (Nextcloud AIO Native)**: BorgBackup creates deduplicated, compressed backups of everything
2. **Tier 2 (Offsite)**: Kopia snapshots the Borg repository and configs to vaults
#### Why This Approach?
- **Best of both worlds**: AIO's BorgBackup is Nextcloud-aware and handles everything correctly, Kopia provides offsite protection
- **Native restore**: Use AIO's built-in restore interface (easiest, most reliable)
- **Disaster recovery**: Full system restore from Kopia backups on new server
- **Deduplication at two levels**: Borg deduplicates within Nextcloud data, Kopia deduplicates across backups
- **Proven strategy**: Same approach used for Mailcow and Immich
#### Backup Frequency
- **AIO BorgBackup**: Configurable in AIO interface (recommend daily at 4 AM)
- **Kopia Tier 2**: Daily at 2 AM (snapshots the Borg repository)
- **Retention (AIO Borg)**: `--keep-within=7d --keep-weekly=4 --keep-monthly=6` (customizable)
- **Retention (Kopia/Offsite)**: 30 daily, 12 weekly, 12 monthly
### Nextcloud AIO Native Backup (BorgBackup)
Nextcloud AIO includes an integrated BorgBackup solution that:
- Backs up PostgreSQL database (hot backup, no downtime)
- Backs up all user files and data
- Backs up Nextcloud configuration and apps
- Provides deduplication and compression
- Can be triggered manually or on schedule
- Includes built-in restore interface
**Key Features:**
- **Deduplication**: Only stores changed blocks (very efficient)
- **Compression**: Reduces backup size significantly
- **Encryption**: Backups are encrypted by default
- **Incremental**: Only backs up changes after first backup
- **Web UI**: Manage backups through AIO's admin interface
**BorgBackup Location:**
- Inside mastercontainer volume: `/mnt/docker-aio-config/data/borg/`
- On host: `/var/lib/docker/volumes/nextcloud_aio_mastercontainer/_data/data/borg/`
## Setting Up Nextcloud AIO Backups
### Prereq:
Make sure you are connected to the repository,
```bash
sudo kopia repository connect server \
--url=https://192.168.5.10:51516 \
--override-username=admin \
--server-cert-fingerprint=696a4999f594b5273a174fd7cab677d8dd1628f9b9d27e557daa87103ee064b2
```
**Note on Multiple Kopia Repositories**: The backup script handles multiple Kopia repositories by explicitly connecting to the Nextcloud-specific repository at the start of each backup. To use a different repository, edit the variables in `/opt/scripts/backup-nextcloud.sh`.
#### Step 1: Configure AIO Built-in Backup
First, configure Nextcloud AIO's built-in backup system:
1. **Access AIO Admin Interface**:
```
https://your-server:8080
```
2. **Navigate to Backup Section** in the AIO interface
3. **Configure Backup Settings**:
- **Backup time**: Set to 04:00 (4 AM) to avoid conflicts with Kopia script
- **Retention policy**: Default is good (`--keep-within=7d --keep-weekly=4 --keep-monthly=6`)
- Can be customized with `BORG_RETENTION_POLICY` environment variable in docker-compose
4. **Verify Backup Location**:
```bash
# Check that Borg repository exists
ls -lh /var/lib/docker/volumes/nextcloud_aio_mastercontainer/_data/data/borg/
```
5. **Trigger First Backup** via AIO interface to verify it works
**Optional: Customize Borg Retention**
Edit your docker-compose.yml to add:
```yaml
environment:
BORG_RETENTION_POLICY: --keep-within=7d --keep-weekly=4 --keep-monthly=6
```
Then restart:
```bash
cd /opt/nextcloud
docker compose down
docker compose up -d
```
#### Step 2: Configure Backup Location
Create the backup directory for metadata and Kopia:
```bash
sudo mkdir -p /opt/nextcloud-backups
sudo chown -R root:root /opt/nextcloud-backups
sudo chmod 755 /opt/nextcloud-backups
```
#### Step 3: Install Backup Script
```bash
# Create scripts directory if not exists
sudo mkdir -p /opt/scripts
# Copy the backup script
sudo cp backup-nextcloud.sh /opt/scripts/
sudo chmod +x /opt/scripts/backup-nextcloud.sh
```
#### Step 4: Configure Backup Script
Edit `/opt/scripts/backup-nextcloud.sh` and verify these settings:
```bash
BACKUP_DIR="/opt/nextcloud-backups" # Local backup storage
KEEP_DAYS=7 # Keep 7 days locally
NEXTCLOUD_DIR="/opt/nextcloud" # Your Nextcloud compose location
DATADIR="/srv/NextCloud-AIO" # Your NEXTCLOUD_DATADIR
KOPIA_SERVER_URL="https://192.168.5.10:51516" # Your Kopia server
KOPIA_USERNAME="admin"
KOPIA_FINGERPRINT="696a4999..."
```
#### Step 5: Test Manual Backup
Run your first backup manually:
```bash
sudo /opt/scripts/backup-nextcloud.sh
```
Expected output:
```
========================================
Starting Nextcloud AIO backup process
========================================
[timestamp] Connecting to Kopia repository...
[timestamp] Kopia repository connected successfully
[timestamp] Triggering Nextcloud AIO BorgBackup...
[timestamp] Found 3 BorgBackup archives in AIO
[timestamp] Latest BorgBackup is recent (within 24 hours)
[timestamp] Exporting Nextcloud configuration...
[timestamp] Backing up AIO mastercontainer volume...
[timestamp] Creating Kopia snapshot of backup directory...
...
========================================
```
Verify the backup:
```bash
# Check local backup
ls -lh /opt/nextcloud-backups/
cat /opt/nextcloud-backups/nextcloud-*/manifest.txt
# Check Kopia snapshots
kopia snapshot list --tags nextcloud
# Check AIO Borg backups (via web interface or command line)
docker exec -it nextcloud-aio-mastercontainer ls -lh /mnt/docker-aio-config/data/borg/
```
#### Step 6: Automated Backup with Cron
**Important Timing**: Schedule this AFTER AIO's built-in backup completes.
- AIO backup: 4:00 AM (configured in AIO interface)
- Kopia script: 5:00 AM (snapshots the completed Borg backup)
Add to root's crontab:
```bash
sudo crontab -e
```
Add this line for daily backups at 5 AM:
```
0 5 * * * /opt/scripts/backup-nextcloud.sh 2>&1 | logger -t nextcloud-backup
```
Alternative schedules:
**Twice daily (5 AM and 5 PM):**
```
0 5,17 * * * /opt/scripts/backup-nextcloud.sh 2>&1 | logger -t nextcloud-backup
```
**After AIO backup completes (4 AM AIO + 1 hour buffer):**
```
0 5 * * * /opt/scripts/backup-nextcloud.sh 2>&1 | logger -t nextcloud-backup
```
#### Step 7: Configure Kopia Retention Policy
Set retention for Nextcloud snapshots:
```bash
kopia policy set /opt/nextcloud-backups \
--keep-latest 30 \
--keep-daily 30 \
--keep-weekly 12 \
--keep-monthly 12
kopia policy set /opt/nextcloud \
--keep-latest 7 \
--keep-daily 7
# If backing up datadir directly
kopia policy set /srv/NextCloud-AIO \
--keep-latest 7 \
--keep-daily 7
```
## Recovery Procedures
### Understanding Two Recovery Methods
We have **two restore methods** depending on the scenario:
1. **AIO Native Restore** (Preferred): Use AIO's built-in restore interface
2. **Kopia Full Restore**: For complete disaster recovery to a new server
### Method 1: AIO Native Restore (Recommended)
Use this method when:
- Restoring on the same server
- AIO is still functional
- You have AIO Borg backups available
This is the **easiest and most reliable** method for Nextcloud AIO.
#### Via AIO Web Interface (Easiest)
1. **Access AIO Admin Interface**:
```
https://your-server:8080
```
2. **Navigate to Backup Section**
3. **Select Restore**
4. **Choose Backup Date** from available Borg backups
5. **Confirm Restore**
- AIO will:
- Stop Nextcloud containers
- Restore database
- Restore all files
- Restore configuration
- Restart containers
6. **Verify** Nextcloud is working after restore
#### Via Command Line (Advanced)
```bash
# Stop Nextcloud (if needed)
docker exec -it nextcloud-aio-mastercontainer \
/usr/bin/docker-compose -f /path/to/compose.yml down
# List available Borg backups
docker exec -it nextcloud-aio-mastercontainer \
borg list /mnt/docker-aio-config/data/borg/borgbackup
# Restore from specific backup
docker exec -it nextcloud-aio-mastercontainer \
/restore-script.sh
# Note: Exact restore commands depend on AIO version
# Recommend using web interface for most reliable restore
```
### Method 2: Complete Server Rebuild (Kopia Restore)
Use this when recovering to a completely new server or when AIO is completely lost.
#### Step 1: Prepare New Server
```bash
# Update system
apt update && apt upgrade -y
# Install Docker
curl -fsSL https://get.docker.com | sh
systemctl enable docker
systemctl start docker
# Install Docker Compose
apt install docker-compose-plugin -y
# Install Kopia
curl -s https://kopia.io/signing-key | sudo gpg --dearmor -o /usr/share/keyrings/kopia-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/kopia-keyring.gpg] https://packages.kopia.io/apt/ stable main" | sudo tee /etc/apt/sources.list.d/kopia.list
apt update
apt install kopia -y
# Create directory structure
mkdir -p /opt/nextcloud
mkdir -p /opt/nextcloud-backups
mkdir -p /srv/NextCloud-AIO
```
#### Step 2: Connect to Kopia Repository
```bash
# Connect to your offsite vault
kopia repository connect server \
--url=https://192.168.5.10:51516 \
--override-username=admin \
--server-cert-fingerprint=696a4999f594b5273a174fd7cab677d8dd1628f9b9d27e557daa87103ee064b2
# Verify connection
kopia repository status
# List available snapshots
kopia snapshot list --tags nextcloud
```
#### Step 3: Restore Configuration
```bash
# Find and restore the config snapshot
kopia snapshot list --tags config
# Restore to the Nextcloud directory
kopia restore <config-snapshot-id> /opt/nextcloud/
# Verify critical files
ls -la /opt/nextcloud/docker-compose.yml
```
#### Step 4: Restore AIO Mastercontainer Volume
```bash
# Find the backup with mastercontainer
kopia snapshot list --tags tier1-backup
# Restore the most recent backup
kopia restore <snapshot-id> /opt/nextcloud-backups/
# Find the most recent backup directory
LATEST_BACKUP=$(ls -td /opt/nextcloud-backups/nextcloud-* | head -1)
echo "Restoring from: $LATEST_BACKUP"
# Extract mastercontainer volume backup
docker volume create nextcloud_aio_mastercontainer
docker run --rm \
-v nextcloud_aio_mastercontainer:/target \
-v "${LATEST_BACKUP}":/backup:ro \
alpine tar -xzf /backup/aio-mastercontainer.tar.gz -C /target
echo "Mastercontainer volume restored"
```
#### Step 5: Restore Borg Repository (Optional but Recommended)
```bash
# Restore the Borg repository directly from Kopia
kopia snapshot list --tags borg
# Restore Borg backup to volume location
kopia restore <borg-snapshot-id> /var/lib/docker/volumes/nextcloud_aio_mastercontainer/_data/data/borg/
```
#### Step 6: Start Nextcloud AIO
```bash
cd /opt/nextcloud
# Create external network if needed
docker network create netgrimoire
# Start mastercontainer
docker compose up -d
# Monitor logs
docker compose logs -f
```
#### Step 7: Access AIO and Restore
1. **Wait for mastercontainer to initialize** (may take 1-2 minutes)
2. **Access AIO Interface**:
```
https://new-server-ip:8080
```
3. **If Borg backups were restored** (Step 5):
- Navigate to Backup section
- Select restore from available backup
- AIO will restore everything automatically
4. **If starting fresh**:
- Follow AIO initial setup
- Restore data from datadir backup if available
#### Step 8: Post-Restore Verification
```bash
# Check all containers are running
docker ps | grep nextcloud
# Expected containers:
# - nextcloud-aio-mastercontainer
# - nextcloud-aio-apache
# - nextcloud-aio-nextcloud
# - nextcloud-aio-database
# - nextcloud-aio-redis
# (and others depending on your setup)
# Check Nextcloud is accessible
curl -I http://localhost:11000
# Access web interface
# https://your-server-domain
# Verify:
# - Login works
# - Files are accessible
# - Apps are functioning
# - Sharing works
```
### Scenario 2: Restore Specific User's Files
To restore a single user's files without affecting others:
**Via AIO Web Interface:**
1. Navigate to Files → Deleted Files (if available)
2. Use Nextcloud's built-in file versioning
**Via Borg Backup:**
```bash
# Mount a Borg backup
docker exec -it nextcloud-aio-mastercontainer bash
# Inside container:
cd /mnt/docker-aio-config/data/borg/
# List available backups
borg list borgbackup
# Mount a specific backup
mkdir -p /tmp/borg-mount
borg mount borgbackup::<archive-name> /tmp/borg-mount
# Navigate to user's files
cd /tmp/borg-mount/nextcloud/data/<username>/files/
# Copy needed files to restore location
cp -r /tmp/borg-mount/nextcloud/data/<username>/files/* \
/actual/nextcloud/data/<username>/files/
# Unmount
borg umount /tmp/borg-mount
exit
# Run Nextcloud file scan
docker exec -it nextcloud-aio-nextcloud bash
php occ files:scan <username>
```
**Via Kopia (if datadir was backed up):**
```bash
# Mount Kopia snapshot
kopia snapshot list --tags datadir
mkdir -p /mnt/kopia-nextcloud
kopia mount <snapshot-id> /mnt/kopia-nextcloud &
# Find user's files
USER="username"
ls /mnt/kopia-nextcloud/${USER}/files/
# Copy files back
rsync -av /mnt/kopia-nextcloud/${USER}/files/ \
/srv/NextCloud-AIO/${USER}/files/
# Unmount
kopia unmount /mnt/kopia-nextcloud
# Rescan files
docker exec -u www-data -it nextcloud-aio-nextcloud \
php occ files:scan ${USER}
```
### Scenario 3: Database Recovery Only
If only the database is corrupted:
**Via AIO Interface (Recommended):**
1. Use AIO's restore feature
2. Select database-only restore (if available)
**Via Borg Backup:**
```bash
docker exec -it nextcloud-aio-mastercontainer bash
# Extract database from Borg
borg extract borgbackup::<archive-name> nextcloud/database/
# Restore to PostgreSQL
# (Exact commands depend on AIO's database structure)
```
**Note**: Database-only restore is tricky with AIO. Recommend using full AIO restore.
### Scenario 4: Rollback After Failed Update
If a Nextcloud update breaks your installation:
1. **Stop Nextcloud**:
```bash
docker exec -it nextcloud-aio-mastercontainer \
/path/to/stop-script.sh
```
2. **Use AIO Restore**:
- Access AIO interface (port 8080)
- Navigate to Backup section
- Restore from backup before the update
3. **Verify** everything works
4. **Disable auto-updates** until update issue is resolved
## Verification and Testing
### Regular Backup Verification
Perform monthly verification:
```bash
# Test 1: Verify AIO Borg backups exist
docker exec -it nextcloud-aio-mastercontainer \
borg list /mnt/docker-aio-config/data/borg/borgbackup
# Test 2: Verify local backups
ls -lth /opt/nextcloud-backups/ | head -5
# Test 3: Verify Kopia snapshots
kopia snapshot list --tags nextcloud
# Test 4: Check Borg backup integrity (in test environment)
docker exec -it nextcloud-aio-mastercontainer \
borg check /mnt/docker-aio-config/data/borg/borgbackup
```
### Backup Monitoring Script
Create `/opt/scripts/check-nextcloud-backup.sh`:
```bash
#!/bin/bash
# Check last backup age
LAST_BACKUP=$(ls -td /opt/nextcloud-backups/nextcloud-* 2>/dev/null | head -1)
if [ -z "$LAST_BACKUP" ]; then
echo "WARNING: No Nextcloud backups found"
exit 1
fi
BACKUP_DATE=$(basename "$LAST_BACKUP" | sed 's/nextcloud-//')
BACKUP_EPOCH=$(date -d "${BACKUP_DATE:0:8} ${BACKUP_DATE:9:2}:${BACKUP_DATE:11:2}:${BACKUP_DATE:13:2}" +%s 2>/dev/null)
NOW=$(date +%s)
AGE_HOURS=$(( ($NOW - $BACKUP_EPOCH) / 3600 ))
if [ $AGE_HOURS -gt 26 ]; then
echo "WARNING: Last Nextcloud backup is $AGE_HOURS hours old"
exit 1
else
echo "OK: Last backup $AGE_HOURS hours ago"
fi
# Check AIO Borg backups
BORG_PATH="/var/lib/docker/volumes/nextcloud_aio_mastercontainer/_data/data/borg"
if [ -d "$BORG_PATH" ]; then
BORG_COUNT=$(find "$BORG_PATH" -type d -name "borgbackup_*" | wc -l)
echo "AIO Borg backups available: $BORG_COUNT"
else
echo "WARNING: Cannot access AIO Borg backups"
fi
# Check Kopia snapshots
KOPIA_LAST=$(kopia snapshot list --tags nextcloud --json 2>/dev/null | jq -r '.[0].startTime' 2>/dev/null)
if [ -n "$KOPIA_LAST" ]; then
echo "Last Kopia snapshot: $KOPIA_LAST"
else
echo "WARNING: Cannot verify Kopia snapshots"
fi
```
Make executable and add to cron:
```bash
chmod +x /opt/scripts/check-nextcloud-backup.sh
sudo crontab -e
0 8 * * * /opt/scripts/check-nextcloud-backup.sh | logger -t nextcloud-backup-check
```
## Disaster Recovery Checklist
When disaster strikes, follow this checklist:
- [ ] Confirm scope of failure (server down, storage failure, database corruption)
- [ ] Gather server information (hostname, IP, domain configuration)
- [ ] Access offsite Kopia repository
- [ ] Provision new server (if needed) with Docker and Kopia
- [ ] Connect to Kopia repository
- [ ] Restore docker-compose configuration
- [ ] Restore AIO mastercontainer volume
- [ ] Restore Borg repository (if available)
- [ ] Start AIO mastercontainer
- [ ] Use AIO's restore interface to restore from Borg backup
- [ ] Verify web interface accessible
- [ ] Test file access and sharing
- [ ] Verify user logins work
- [ ] Check all apps are functioning
- [ ] Update DNS if server IP changed
- [ ] Document issues and lessons learned
## Important Notes
1. **AIO Backup Schedule**: Configure AIO's built-in backup to run BEFORE the Kopia script (e.g., AIO at 4 AM, Kopia at 5 AM)
2. **Storage Requirements**: Borg backups are deduplicated but can still be large. Ensure adequate space:
- Borg repository: ~1.5x your data size initially
- Kopia adds minimal overhead due to deduplication
3. **Network Configuration**: Your setup uses external network `netgrimoire` and custom Apache port 11000. Ensure these are documented for restore.
4. **SKIP_DOMAIN_VALIDATION**: Your setup has this enabled. Ensure domain is properly configured for restore.
5. **Testing**: Always test recovery procedures in a lab environment before trusting them in production.
6. **Documentation**: Keep this guide and server details in a separate location (printed copy, password manager, etc.).
7. **Retention Policy**: Review both Borg and Kopia retention settings periodically to balance storage costs with recovery needs.
8. **Updates**: When updating Nextcloud via AIO, ensure a backup is taken first (AIO should do this automatically).
## Backup Architecture Notes
### Why Two Backup Layers?
**Nextcloud AIO BorgBackup** (Tier 1):
- ✅ Nextcloud-aware (knows how to backup everything correctly)
- ✅ Built-in restore interface (easiest to use)
- ✅ Deduplication and compression
- ✅ Incremental backups (efficient)
- ✅ Encryption included
- ❌ Single location (inside Docker volume)
- ❌ No offsite replication built-in
**Kopia Snapshots** (Tier 2):
- ✅ Offsite protection in vaults
- ✅ Additional deduplication layer
- ✅ Point-in-time recovery
- ✅ Disaster recovery to new infrastructure
- ✅ Independent of Nextcloud/Docker state
- ❌ Less Nextcloud-aware
- ❌ More complex restore process
### Storage Efficiency
For a 200GB Nextcloud instance:
**Borg (Tier 1):**
- First backup: ~200GB
- Daily incremental: ~2-5GB (only changes)
- With retention policy: ~250GB total (7 days daily + 4 weekly + 6 monthly)
**Kopia (Tier 2) backing up Borg:**
- First snapshot: ~250GB
- Daily changes: ~5-10GB (only changed Borg chunks)
- Much smaller than backing up raw data
**Combined savings**: Borg handles Nextcloud deduplication, Kopia handles backup deduplication
### Deduplication Layers
1. **Nextcloud level**: Versioning and deleted files
2. **Borg level**: Block-level deduplication within Nextcloud data
3. **Kopia level**: File-level deduplication of Borg repository
## Troubleshooting
### "Cannot access AIO interface"
**Symptoms**: Cannot connect to port 8080
**Solutions**:
```bash
# Check mastercontainer is running
docker ps | grep nextcloud-aio-mastercontainer
# Check logs
docker logs nextcloud-aio-mastercontainer
# Restart mastercontainer
cd /opt/nextcloud
docker compose restart
# Check firewall
sudo ufw status
sudo ufw allow 8080/tcp
```
### "Borg backup fails"
**Symptoms**: AIO reports backup failure
**Solutions**:
```bash
# Check disk space
df -h
# Check Borg repository
docker exec -it nextcloud-aio-mastercontainer \
borg check /mnt/docker-aio-config/data/borg/borgbackup
# Repair if needed (last resort)
docker exec -it nextcloud-aio-mastercontainer \
borg check --repair /mnt/docker-aio-config/data/borg/borgbackup
```
### "Restore hangs or fails"
**Symptoms**: AIO restore doesn't complete
**Solutions**:
```bash
# Check available disk space
df -h /srv/NextCloud-AIO
# Check Docker resources
docker stats
# Increase Docker memory/CPU limits if needed
# Try restoring to different location first (test)
```
### "Files missing after restore"
**Symptoms**: Nextcloud restored but files don't appear
**Solutions**:
```bash
# Rescan files
docker exec -u www-data -it nextcloud-aio-nextcloud \
php occ files:scan --all
# Check file permissions
ls -la /srv/NextCloud-AIO/
# Verify datadir mount
docker inspect nextcloud-aio-nextcloud | grep -A 10 Mounts
```
### "Kopia snapshot fails"
**Symptoms**: Tier 2 backup fails but local backup succeeds
**Solutions**:
```bash
# Check Kopia connection
kopia repository status
# Reconnect if needed
kopia repository disconnect
kopia repository connect server --url=...
# Check available space in Kopia repository
kopia repository status | grep Space
# Manually create snapshot to test
kopia snapshot create /opt/nextcloud-backups
```
## Advanced Topics
### Customizing Borg Retention Policy
Edit docker-compose.yml:
```yaml
environment:
# Keep 7 days, 4 weeks, 12 months
BORG_RETENTION_POLICY: --keep-within=7d --keep-weekly=4 --keep-monthly=12
# More aggressive (less space, shorter history)
# BORG_RETENTION_POLICY: --keep-within=3d --keep-weekly=2 --keep-monthly=3
# More conservative (more space, longer history)
# BORG_RETENTION_POLICY: --keep-within=14d --keep-weekly=8 --keep-monthly=24
```
Restart AIO:
```bash
cd /opt/nextcloud
docker compose down
docker compose up -d
```
### Excluding Large Directories from Backup
If certain directories don't need backup (e.g., temporary files, caches):
This must be configured in AIO's backup interface or Borg configuration. Consult AIO documentation for current version's options.
### Backup to Multiple Destinations
For critical data, backup to multiple vaults:
```bash
# In backup script, add second Kopia repository
# After first snapshot completes:
# Connect to second repository
kopia repository disconnect
kopia repository connect server --url=https://backup2.example.com:51517 ...
# Create snapshots in second repository
kopia snapshot create /opt/nextcloud-backups
kopia snapshot create /var/lib/docker/volumes/nextcloud_aio_mastercontainer/_data/data/borg/
```
### Backup Notifications
Add to the end of `/opt/scripts/backup-nextcloud.sh`:
```bash
ADMIN_EMAIL="admin@example.com"
if [ $? -eq 0 ]; then
echo "Nextcloud backup completed successfully" | \
mail -s "✓ Nextcloud Backup Success" "$ADMIN_EMAIL"
else
echo "Nextcloud backup FAILED! Check logs at /var/log/nextcloud-backup.log" | \
mail -s "✗ Nextcloud Backup FAILED" "$ADMIN_EMAIL"
fi
# Healthchecks.io ping
curl -fsS --retry 3 https://hc-ping.com/your-uuid-here
# Webhook notification
curl -X POST https://monitor.example.com/backup-status \
-H "Content-Type: application/json" \
-d '{"service":"nextcloud","status":"success"}'
```
## Additional Resources
- [Nextcloud AIO Official Documentation](https://github.com/nextcloud/all-in-one)
- [Nextcloud AIO Backup Documentation](https://github.com/nextcloud/all-in-one#backup-and-restore)
- [BorgBackup Documentation](https://borgbackup.readthedocs.io/)
- [Kopia Documentation](https://kopia.io/docs/)
- [Docker Volume Backup Best Practices](https://docs.docker.com/storage/volumes/#back-up-restore-or-migrate-data-volumes)
## Revision History
| Date | Version | Changes |
|------|---------|---------|
| 2026-02-13 | 1.0 | Initial documentation - two-tier backup strategy using AIO's BorgBackup + Kopia |
---
**Last Updated**: February 13, 2026
**Maintained By**: System Administrator
**Review Schedule**: Quarterly