duplicati/duplicati
Duplicati
Duplicati is a self-hosted backup server designed to perform encrypted, incremental, and compressed backups to a wide range of local, network, and cloud-based storage providers. It functions as a background service that automates recurring data protection tasks, ensuring that only changed data blocks are stored to maximize efficiency and minimize bandwidth usage.
The project distinguishes itself through a centralized management console that allows for the orchestration of multiple distributed backup agents from a single web-based dashboard. It supports multi-tenant management, enabling the organization of users and resources into hierarchical structures for delegated access and data isolation. Furthermore, it provides robust security features, including AES-256 encryption for data at rest, support for OIDC and SAML2 authentication, and provider-level immutability protections to prevent unauthorized modification of backup archives.
Beyond its core backup capabilities, the system includes comprehensive tools for data lifecycle management, such as automated retention policies, versioning, and integrity verification. It offers flexible configuration through both a graphical interface and a command-line utility, supporting automation scripting and dry-run simulations to verify workflows before execution. The software also handles complex environments by managing locked files and providing metadata indexing to ensure rapid restoration even if the primary configuration database is unavailable.
Duplicati is available through various installation formats, including native system packages, portable archives, and containerized deployments, allowing it to run in diverse operating environments.
Features
- Automated Backup Systems - Schedules recurring tasks that capture only changed data blocks to minimize storage usage and network transfer times.
- Management Consoles - Provides a web-based dashboard to monitor, configure, and control multiple distributed backup agents from a single location.
- Backup Management - Automates recurring backup tasks via a background service with a web-based interface for managing data protection policies.
- Backup Storage Backends - Captures filesystem snapshots by storing only changed data blocks as compressed and encrypted volumes.
- Cloud Backups - Performs encrypted, incremental, and compressed backups to local, network, or cloud-based storage providers.
- Encrypted Backups - Secures backup archives with AES-256 encryption to ensure data confidentiality at rest on remote storage providers.
- Backup Storage Backends - Supports uploading encrypted and compressed archives to a wide range of cloud, network, and local storage providers.
- Data Recovery - Retrieves files from remote storage destinations and rebuilds local metadata to restore data to specific points in time.
- Deduplication Backup Tools - Identifies and stores unique data blocks only once across all versions to maximize storage efficiency.
- Backup and Recovery Systems - Provides tools for restoring files and system states across different environments by rebuilding metadata from remote backup archives.
- Block Storage - Breaks data into unique chunks to store only changes, significantly reducing storage requirements and network bandwidth usage.
- Filesystem Backups - Tracks historical snapshots of the filesystem to allow restoration of files to specific points in time.
- Backup Orchestrators - Provides a centralized dashboard for monitoring, configuring, and orchestrating backup operations across multiple distributed machines.
- Storage Immutability Protections - Prevents unauthorized modification or deletion of backup archives by leveraging provider-level object locking features.
- Management Interfaces - Provides a centralized web-based dashboard for managing backup tasks, monitoring status, and configuring system settings.
- Backup Solutions - Encrypted backup client for cloud and remote storage.
- Backup Solutions - Tool for storing encrypted backups in cloud storage.
- Notes and Utilities - Secure cloud backup software.
- Data Compression Algorithms - Bundles and compresses data blocks before transmission to minimize storage footprint and network bandwidth usage.
- Retention Policies - Automatically prunes older backup versions based on time intervals or version counts to manage storage usage.
- Multi-Tenant Data Management - Organizes users and resources into hierarchical structures to separate customer data, manage licensing, and delegate administrative access.
- Command Line Interfaces - Performs backup and restore operations directly through a command-line interface for automated scripting and headless system management.
- Access Control - Secures the server interface by requiring a password stored as a salted hash to prevent unauthorized access.
- Encrypted Archiving Tools - Compresses and encrypts data into standardized volumes before transmission to ensure confidentiality and integrity on remote storage.
- Authentication Management - Integrates with OIDC or SAML2 identity providers to allow users to sign in using existing enterprise credentials.
- Web Management Dashboards - Connects local instances to a centralized web console to monitor and control multiple machines from a single dashboard.
- Automated Server Maintenance - Runs backup agents as background system services in headless environments for automated, unattended data maintenance.
- Migration Restoration - Restores backed-up cloud content into different user accounts, groups, or separate cloud environments to maintain data continuity during migrations.
- Backup and Restore Monitoring - Scans remote storage to verify data consistency and prevent corrupted backups before restoration.
- Metadata Storage - Reconstructs local metadata indexes from remote storage to restore synchronization when local databases are missing.
- Storage Abstraction Layers - Uses a unified command set to interact with diverse cloud and network storage providers through a consistent interface.
- Background Service Orchestrators - Runs as a background system process to execute scheduled tasks independently of user sessions or desktop interfaces.
- Containerized Deployments - Runs as an isolated containerized service with managed persistent storage and secure configuration injection.
- Secrets and Credential Management - Secures application secrets and encryption keys using environment variables, file-based configurations, or external secret management providers.
- Remote Management - Connects background service instances to a centralized management console to enable remote monitoring and orchestration.
- Data Backup Solutions - Copies existing backup data between storage locations to increase redundancy and protect against provider failure.
- Local Metadata Stores - Maintains a local database of file versions and block locations to enable rapid backup operations and efficient restoration.
- Metadata Caching - Stores file paths and remote state information in a local database to speed up queries and avoid frequent remote requests.
- Headless Execution Environments - Executes backup processes in environments without user interaction by connecting to a remote management console.
- Native Installers - Provides multiple installation formats including native system packages, portable archives, and containerized bundles.
- Encrypted Database Managers - Protects sensitive signing keys and configuration data by applying encryption to the local database file.
- Agent Health Monitoring - Tracks connection status, backup job results, and storage consumption across all managed devices with visual indicators.
- Backup Filters - Enables precise control over backup contents using path matching, globbing, and regular expressions.
- System Services - Maintains the server process as a background system service that automatically restarts upon failure or system login.
