The enterprise web UI for BorgBackup.
Borg Backup Server is a self-hosted web UI for BorgBackup. Centrally manage encrypted backups across Mac, Windows & Linux with zero-trust agents, policy-based scheduling, fast file-level restores, offsite replication, and enterprise access controls (SSO/RBAC/TOTP 2FA).
Set it up in under 5 minutes: Docker Installation
- MIT Licensed
- Self-Hosted
- Linux · Windows · MacOS
- Built on BorgBackup
The backup server never needs access to your endpoints.
Traditional backup servers hold credentials for every machine they protect — one breach exposes them all. BBS reverses that model: the server never connects to your endpoints. Lightweight agents poll it for work over HTTPS and push backups over SSH into append-only repositories. A compromised server has no path into your clients, and a compromised client can’t rewrite or destroy its own backup history. Whichever side is attacked, your backups survive.
BBS ServerCONTROL PLANEAgent-Initiated
Endpoints poll BBS for work over HTTPS. No inbound firewall rules or server-initiated SSH access required.
Append-Only Repositories
Backup agents can create archives but cannot delete or prune repository data — even a fully compromised client can't destroy history.
Encrypted by Default
Borg repositories remain encrypted at rest, while stored credentials and repository passphrases are protected with AES-256-GCM.
S3 Offsite Sync
Mirror local repositories to S3-compatible object storage for maximum offsite protection — a second copy that lives beyond your own hardware.
$ borg prune --keep-daily 7 --keep-weekly 4 --keep-monthly 6
$ borg check --repository-only
$ borg extract ::web-prod-01-2026-08-07 var/www/config.php
# repeat × 124 endpoints · every schedule · every restore
Backup Schedules
BBS is your visual cron editor.
Stop wrangling command lines and hand-edited cron jobs. Build backup plans in a beautiful point-and-click interface — flexible schedules, pre- and post-backup plugins, and real-time monitoring of every job — while BorgBackup keeps doing the heavy lifting underneath.
- Centralized endpoint management
- Flexible policy-based backup plans
- Real-time job monitoring
- Repository health management
- Searchable file catalogs
- Browser-based restores
- Automated retention
- Offsite replication
- Reporting and alerting
A complete backup platform in one web UI.
Scheduling, recovery, and storage management — the capabilities IT teams expect from commercial backup software, without the license.
Flexible Scheduling
Run plans hourly, daily, weekly, monthly, or on demand. Assign multiple backup plans to individual endpoints.
Backup Templates
Create reusable filesystem templates for web servers, databases, workstations, application servers, and custom workloads.
Retention Policies
Configure hourly, daily, weekly, monthly, and yearly retention policies per backup plan.
Queue Management
Control concurrency, monitor running jobs, cancel operations, and retry failed tasks.
Instant File Search
Catalog backup metadata in ClickHouse for fast searching without locking or mounting Borg repositories.
File-Level Restore
Browse archived directory trees and restore individual files directly from the web UI.
Archive Downloads
Extract selected backup content and download it directly as a .tar.gz archive.
Database Recovery
Restore MySQL, PostgreSQL, and MongoDB backups into the original database or into a separate database copy.
Local Borg Repositories
Manage storage directly from BBS using secure SSH-based Borg repositories.
S3 Offsite Replication
Mirror repositories to S3-compatible object storage including AWS S3, Wasabi, and Backblaze B2.
Remote Borg Storage
Connect to BorgBase, Hetzner Storage Boxes, rsync.net, or other Borg-compatible SSH storage.
Repository Management
Perform Borg repository maintenance including unlock, check, repair, and re-catalog operations.
Back up more than files.
BBS plugins extend backup workflows with application-aware operations that run before or after Borg jobs. MySQL, PostgreSQL, and MongoDB are built in — and shell hooks cover everything else.
MySQL
PostgreSQL
MongoDBPerform automated database backups and automatic restores — right back into that database, as a copy or replacing it.
Shell Scripts
Hook in any other database or application — Redis, MariaDB, SQLite, LVM/ZFS snapshots, you name it — with custom pre-backup and post-backup scripts.
Enterprise access controls are built in.
BackupsManage
ReposManage
PlansPerform
RestoresRepo
Maint
Single Sign-On
Plug BBS into the identity provider your organization already runs — one login, no separate backup passwords.
Per-Client Permissions
Decide which clients each user can see, and exactly what they can do on each one — view, run backups, restore, manage plans and repos, or maintain repositories.
Two-Factor Authentication
TOTP-based 2FA with recovery codes for local accounts — works with any authenticator app.
Multi-User Administration
Admins run the platform; Users get scoped access. Safely delegate backup operations across infrastructure, support, and operations teams.
Know exactly what your backups are doing.
Every job streams progress, transfer statistics, and full Borg output to the web UI as it runs.
- Real-time progress and transfer rates
- Detailed logs for every operation
- Queue position and concurrency control
- Retry and cancellation controls
- Historical execution data
A /var/www/releases/20260808/vendor/autoload.php
M /var/www/shared/cache/routes.php
A /var/www/shared/uploads/2026/08/invoice-2214.pdf
Your backup shouldn't have only one backup.
Automatically replicate local repositories to S3-compatible object storage to maintain geographically separated copies and improve disaster recovery resilience.
BBS backs up itself, too.
Automatically protect the BBS database, configuration, encryption material, and application state with scheduled server backups and optional offsite replication. Restore scripts are generated to simplify disaster recovery.
- Daily BBS self-backups
- Optional S3 sync
- Generated recovery scripts
- Configuration & key protection
2.8.1Current
2.8.1Current
2.7.4Update Available
2.8.1Current
Upgrade your entire backup environment from one place.
BBS can upgrade the server, endpoint agents, and manage Borg versions across protected systems — without manually touching every machine.
- One-click agent upgrades, fleet-wide or selective
- Managed Borg versions per endpoint
- Server self-upgrade from the web interface
Backups shouldn't fail quietly.
Nightly Backup Reports
Receive daily email summaries covering backup health, failures, storage usage, and job statistics.
Apprise Notifications
Send alerts through more than 100 supported services.
Run it your way.
Docker in a single command, or install directly on bare metal, a virtual machine, or an LXC container. Pick your platform — the Installation guide has current, step-by-step instructions for each.
Instructions live in the wiki so they stay current with every release. Read the Installation guide
Windows endpoints, backed up by real Borg.
BorgBackup has never shipped a native Windows binary — the usual workarounds are WSL, Cygwin, or leaving Windows machines unprotected. So we compiled one. A native borg.exe that reads NTFS the way Windows does, needs no Python on the target machine, and backs up and restores NTFS permissions — owner, group, and DACL — as SDDL.
It is free, BSD 3-clause, maintained by us alongside BBS, and running today across hundreds of production endpoints.
- Native build — no WSL or Cygwin
- NTFS ACL backup and restore
- Standalone — no Python required
- Standard, portable Borg repositories
borg 1.4.5
PS C:\> borg.exe create ::win-file-01 C:\Users C:\inetpub
Deduplicated size: 1.94 GB
NTFS ACLs: stored (owner, group, DACL)
# native Windows process — not WSL, not Cygwin
Try it before you deploy it.
Spin up a fully functional Borg Backup Server instance in about a minute. Explore the web UI, create backup plans, browse the file restore interface, and test database backup plugins — all in a real environment.
Launch a Private Demo
No credit card required. We'll email a confirmation link that instantly spins up your demo — fully automated.
Open source infrastructure you actually control.
Borg Backup Server is MIT licensed and completely self-hosted. Your backup metadata, encryption keys, repositories, authentication systems, and infrastructure remain under your control.
MIT License
Use it. Modify it. Deploy it commercially.
No License Keys
No activation servers or subscription checks.
No Paid Edition
Core functionality is not hidden behind an enterprise tier.
No Hosted Control Plane
Your backup environment does not depend on an external SaaS provider.
Give BorgBackup an enterprise control plane.
Securely manage backups, endpoints, repositories, restores, retention, replication, and reporting from one self-hosted platform.