databasus/databasus
Databasus
Databasus is a self-hosted backup platform that automates PostgreSQL backups, verifies their restorability, and stores them across multiple destinations while managing team access with role-based permissions. It combines on-the-fly AES-256-GCM encryption, cron-driven scheduling, job-queue-based verification, multi-destination storage, WAL streaming, throwaway container restore testing, and workspace-based role access control into a unified backup system.
The platform distinguishes itself through automatic backup verification that restores each backup into a temporary database container for integrity checking, then discards it without impacting production systems. It continuously captures the database write-ahead log stream to enable recovery to any specific moment with near-zero data loss, and writes backup files to multiple storage backends simultaneously through a unified interface supporting local disk, cloud services, and rclone-compatible providers. Resources and users are organized into isolated workspaces with granular Viewer, Member, Admin, and Owner roles, enforcing permissions and audit logging.
The system supports physical, logical, and WAL streaming backups of PostgreSQL databases, with flexible scheduling using hourly, daily, weekly, monthly, or custom cron expressions. Backup retention policies automatically remove old backups based on age, count, or storage size rules. Verification tasks are dispatched to a queue and picked up by lightweight agents running on any Docker host, enabling distributed and asynchronous restore testing. Notifications deliver real-time success or failure alerts through email, Telegram, Slack, Discord, or webhooks.
Deployment options include automated script installation, Docker, Docker Compose, and Kubernetes via a Helm chart, with reverse proxy configuration for automatic HTTPS certificates.
Features
- PostgreSQL Backup Strategies - Automates scheduled PostgreSQL backups with physical, logical, and WAL streaming methods to multiple destinations.
- Workspace Access Controls - Groups databases, notifiers, and storages into workspaces with role-based permissions and audit logs.
- Role Assignments - Sets permissions per workspace—Viewer, Member, Admin, Owner—to control who can view, manage, or initiate backups.
- Cron-Driven Backup Schedules - Runs backups on flexible timetables using hourly, daily, weekly, monthly, or cron expressions.
- Automated Backup Integrity Checks - Automatically verifies each backup by restoring it into a throwaway container to confirm it is restorable.
- Containerized Backup Verifications - Automatically restores each backup into a temporary container to verify restorability without affecting production.
- Distributed Verification Agents - Deploy a lightweight binary on any host with Docker to pick up verification jobs from a queue, execute them locally, and report results back.
- Backup Job Configurations - Configures PostgreSQL database connections, schedules, storage destinations, and notifications for automated backups.
- Multi-Destination Backup Storage - Sends backups to local storage, cloud services, or SFTP, keeping all data under user control.
- Multi-Destination Backup Storages - Ships simultaneous multi-destination backup writing to local disk, S3, Google Drive, and rclone providers.
- Simultaneous Multi-Destination Storages - Sends backup files simultaneously to local disk, cloud services, and remote storage with user-controlled encryption.
- Automated Restorability Verifications - Automatically tests backup restorability by restoring into throwaway containers and reporting integrity results.
- Throwaway Container Restorations - Restores each backup into a temporary container for integrity checking without impacting production.
- Throwaway Container Restore Verification - Restores backups into throwaway containers to verify restorability without impacting production systems.
- Multi-Destination PostgreSQL Backups - Automates PostgreSQL backups with physical, logical, and WAL streaming methods to multiple storage destinations.
- Database WAL Streamings - Continuously streams PostgreSQL write-ahead logs to enable point-in-time recovery with minimal data loss.
- Cron Scheduling - Schedules backup jobs using flexible cron expressions and predefined intervals.
- Backup Workspace Permissions - Organizes backup resources into isolated workspaces with granular role-based permissions for team collaboration.
- Workspace Organization - Groups databases, notifiers, and storages into isolated workspaces visible only to invited users.
- Point-in-Time Recovery - Replays WAL archives to restore databases to any specific historical moment with minimal data loss.
- WAL Streaming - Continuously streams write-ahead logs to enable recovery to any specific moment with near-zero data loss.
- Backup - Writes backup files to multiple storage backends simultaneously via a unified interface.
- Self-Hosted Backup Platforms - Provides a self-hosted platform for managing database backups, verification, and point-in-time recovery with team access control.
- Encrypted Backups - Encrypts each backup file on the fly with AES-256-GCM using a unique key derived from a master key and random salt.
- On-the-Fly - Encrypts each backup file on the fly with AES-256-GCM using a unique derived key.
- Workspace Role Assignments - Organizes resources into isolated workspaces with granular roles and audit logging.
- Secret Encryption - Encrypts passwords, tokens, and webhook secrets using AES-256-GCM before storing them in the internal database.
- Policy-Based Retention - Automatically removes old backups based on age, count, or storage size rules to manage costs and compliance.
- On-Demand Verification Triggers - Initiates one-off restore verifications on demand for spot-checking backups or testing agents.
- Logical - Exports databases in engine-specific binary format, compressed and suitable for parallel restore.
- Physical - Creates file-level physical copies of PostgreSQL clusters with full and incremental backup support.
- Verification Result Inspections - Provides detailed inspection of verification results including timeline, exit code, and per-table row counts.
- Read-Only Credential Enforcement - Verifies database credentials have no write privileges and can automatically create a read-only user for safe backups.
- Restore Verification Schedules - Configures per-database verification cadences using cron expressions or predefined intervals.
- Workspace Team Creation - Organizes databases, storages, and notifiers into isolated workspaces with role-based permissions and audit logging.
- Webhook Notifications - Posts backup alerts to any service through a configurable webhook endpoint.
- Webhook Notification Channels - Sends backup status alerts to Slack, Discord, Telegram, and Microsoft Teams channels via webhooks.
- Chat Platform Integrations - Posts backup progress and completion alerts to Slack, Discord, Telegram, and similar chat platforms.
- Email Notification Services - Sends email notifications for backup success, failure, or issues via SMTP integration.
- Audit Logs - Records every user action such as backup initiation and workspace changes for security and compliance monitoring.
- User Invitation Systems - Sends email invitations for new users to join workspaces with control over who can send invites.
- Job Queues - Dispatches verification tasks to a queue for distributed, asynchronous restore testing.
- Verification Outcome Notifications - Sends verification success or failure notifications through configured channels with independent event toggles.
- Webhook Status Notifications - Delivers real-time backup success or failure alerts via webhooks to external services.
- Backup and Recovery - Manages scheduled backups with web UI and external storage support.
- Backup and Recovery - Web-based UI for scheduling PostgreSQL backups to external storage.
