Sebastian Kippe
f7afc21f9e
Fixes a warning thrown by OpenSSL during backup runs, and makes it more secure.
22 lines
623 B
Markdown
22 lines
623 B
Markdown
Backup
|
|
======
|
|
|
|
## Backup gem
|
|
|
|
Backups are stored on AWS S3, in the `kosmos-dev-backups` bucket.
|
|
|
|
The S3 credentials as well as the backup password are stored in the
|
|
`credentials` data bag under the `backup` item.
|
|
|
|
### Restore
|
|
|
|
To decrypt a backup archive, use the following command:
|
|
|
|
openssl aes-256-cbc -d -base64 -pbkdf2 -in my_backup.tar.enc -out my_backup.tar
|
|
|
|
If you get an error message along the lines of "bad decrypt", the archive was
|
|
likely encrypted before we switched the key derivation scheme. Try without
|
|
`-pbkdf2` in this case:
|
|
|
|
openssl aes-256-cbc -d -base64 -in my_backup.tar.enc -out my_backup.tar
|