Backup destinations
A backup destination is a bucket in Amazon S3 or any S3-compatible storage, such as Cloudflare R2, Hetzner Object Storage, Backblaze B2 or MinIO. Databases and Harblet itself store their backups there.
Add a destination
Create a bucket and an access key
Create a bucket at your storage provider and an access key for it. The key needs to read, write and delete objects in the bucket.
Open Backup destinations
Click Backup destinations in the sidebar, then Add destination.
Fill in the form
R2 backups.https://s3.example.com. Leave it empty for Amazon S3.eu-central-1.s3:// or slashes.harblet/backups. Leave it empty to store backups at the top level.Save it
Click Add destination. Harblet writes a test file to the bucket and deletes it again. If that fails, it shows why and saves nothing.
Provider settings
| Provider | Endpoint | Region |
|---|---|---|
| Amazon S3 | Leave empty | The bucket's region, for example eu-central-1 |
| Cloudflare R2 | https://<account-id>.r2.cloudflarestorage.com | auto |
| Hetzner Object Storage | https://<location>.your-objectstorage.com | The location, for example fsn1 |
| Backblaze B2 | https://s3.<region>.backblazeb2.com | The region, for example us-west-004 |
| MinIO | Your MinIO URL | us-east-1, unless you set another |
Check your provider's documentation for the exact values. With an endpoint, Harblet addresses the bucket in the path of the URL, which every S3-compatible storage supports.
Errors when adding
| Message | What to check |
|---|---|
| This bucket doesn't exist. | The bucket name, and that it exists at this endpoint |
| The storage doesn't accept this bucket name. | The bucket name |
| The bucket is in another region. | The region |
| The storage doesn't know this access key ID. | The access key ID |
| The secret access key doesn't match the access key ID. | The secret access key |
| This access key isn't allowed to write to and delete from the bucket. | The key's permissions |
| Harblet can't find this address. | The endpoint URL |
| The storage refused the connection. | The endpoint URL and its port |
| The storage didn't answer within 15 seconds. | The endpoint URL, and that your server can reach it |
| A destination with this name already exists. | Choose another name |
Change or remove a destination
Destinations can't be edited. To change the access key, remove the destination, add it again and choose it again on every database and under Settings → Backups.
To remove a destination, click its trash button and confirm. Harblet forgets the destination, its access key and the list of backups stored there. The files stay in the bucket. Databases that backed up to it stop backing up, and so does Harblet's own backup if it used this destination.
The secret access key is stored encrypted with Harblet's app secret.