Self-hosted beta · GNU GPLv3

Bring every backup under your own roof.

BackupSheep is the open-source control plane for websites, databases, servers, volumes, and cloud infrastructure. One place to schedule the work, keep copies where you choose, and recover with confidence.

No BackupSheep cloud in the data path Docker Compose deployment Storage you control
RECOVERY ROUTE policy online
sources
owned copies
FILESproduction-web
DATABASEpostgres-primary
CLOUDvultr / server-04
BACKUPSHEEP Policy engine 03:00 / daily
IMMUTABLEAmazon S3
locked
OFFSITECloudflare R2
verified
LOCAL/backups
ready
26storage destinations,
including local disk
1-clickwebsite + database
restores
9cloud provider
families
6,500+users served in the
original SaaS era

The recovery control plane

Your infrastructure is distributed. Your recovery plan should not be.

Cloud snapshots in one console. Database dumps in another. Website archives somewhere else. BackupSheep gives the whole recovery surface one operating model—without taking ownership away from you.

Read the usage guide
  1. 01
    CONNECT

    Find what matters.

    Bring cloud accounts, Linux hosts, databases, WordPress, and Basecamp into one inventory.

  2. 02
    POLICY

    Decide once.

    Use cron, intervals, or one-time schedules. Add retention and protected-copy requirements.

  3. 03
    COPY

    Send it wider.

    Fan one backup out to local disk, object storage, cloud drives, or several destinations at once.

  4. 04
    RECOVER

    Know the way back.

    Restore files and databases from the console; rebuild native cloud snapshots through the provider.

What it protects

One control plane.
Three recovery paths.

BackupSheep uses the right mechanism for the source: incremental file archives, native database dumps, or provider snapshots. Nothing is flattened into a lowest-common-denominator backup.

INCREMENTAL FILE ENGINE

Move the change.
Keep the whole.

After the first mirror, only new and changed files cross the network. Every run still becomes a complete, standalone zip—never a fragile restore chain.

  • Deletions propagate to the next archive
  • Regex and glob include/exclude rules
  • Parallel transfers and SSH key support
  • Full-backup mode when you prefer it

Your data, your topology

One backup can have more than one safe place.

Fan every archive out to several destinations in the same run. Keep it on your own disk, use the object storage you already buy, or add a separate copy beyond the blast radius.

BACKUPproduction-web684 MB · verified zip
FAST COPYLocal disk / NFS
ready
OFFSITE COPYCloudflare R2
verified
PROTECTED COPYAmazon S3 Object Lock
locked
DESTINATION INDEX26 places to keep a recovery
Provider details ↗
OBJECT & S3-COMPATIBLE

Amazon S3 · Backblaze B2 · Wasabi · Cloudflare R2 · DigitalOcean Spaces · Google Cloud Storage · Azure Blob · IDrive e2 · IBM COS · Oracle · Scaleway · Linode · Vultr · UpCloud · Exoscale · Filebase · IONOS · Leviia · RackCorp · Tencent COS · Alibaba OSS

CLOUD DRIVES

Dropbox · Google Drive · Microsoft OneDrive · pCloud

YOUR INFRASTRUCTURE

Local Storage · bind-mounted disk · NFS path

26 includes Local Storage. Hetzner Object Storage connects through its S3-compatible endpoint. Amazon S3 Object Lock controls apply specifically to Amazon S3 destinations.

Recovery is the feature

The day you need it, you should not need a runbook.

Open a historical backup, choose the stored copy, and start the restore from the same console that created it. Live status and redacted logs keep the recovery visible.

01

WebsitesReverse-mirror files, with optional exact-mirror deletion.

02

DatabasesImport native dumps and recreate missing databases.

03

Cloud snapshotsRebuild through the provider’s native recovery workflow.

Restore backup
production-web
BackupOptionsConfirm
RESTORE FROM

Aug 12, 2026 · 02:58684 MB · Cloudflare R2

Restore all filesPush the complete archive to the source

Exact mirrorDelete files missing from the backup

Archive integrity recordedContinue
RECOVERY RECORDEvery restore is a tracked run.

The hard parts stay visible

A green check should mean the whole backup worked.

BackupSheep is designed to fail loudly, resume deliberately, and keep sensitive details out of the logs your team needs to read.

01

No silent partials

Transfer and native command exit status is checked. One failed file fails the run instead of archiving a gap.

FAIL LOUDLY
02

Resume-friendly work

Interrupted transfers continue, retries reuse the backup record, and concurrent runs for one node are serialized.

RETRY SAFELY
03

Disk-space preflight

Database engines check available space against the expected dump before doing expensive work.

CHECK FIRST
04

Credential hygiene

Secrets are encrypted at rest, kept out of process arguments, and redacted from backup and restore logs.

REDACTED
05

Protected-copy gate

A schedule can require an air-gapped destination to validate successfully before the backup begins.

PRE-FLIGHTED
06

Immutable S3 retention

Amazon S3 destinations can apply Object Lock governance or compliance retention to every new archive.

LOCKED

More than a scheduler

The operating surface your team was missing.

SCHEDULECron, interval, one-time, or on demand

See upcoming runs and attach keep-last retention to each protected source.

SIGNALEmail, Slack, and Telegram

Route success, failure, restore, and storage-validation events to the right people.

ACCESSTeams with granular permissions

Invite users, group them, scope nodes, and separate backup, schedule, integration, and storage rights.

AUDITAccount-wide activity history

Track actions, errors, acting users, and successful or failed sign-ins from one log.

APIREST coverage for the console

Automate the same workflows your operators use in the UI.

SCALEIndependent worker queues

Scale cloud, database, file, storage, and log work without starving the web console.

Open source today

Your server.
Your storage.
Your recovery.

Run the complete stack on a fresh Ubuntu 22.04+ or Debian 12+ server. The installer adds Docker and Compose, generates secrets, builds every service, and waits for a healthy app.

backup-node — installbash
# Run on a fresh Ubuntu or Debian server
$ curl -fsSL https://raw.githubusercontent.com/
bilal414/backupsheep/main/install.sh | sudo bash Docker + Compose ready Application secrets generated Web, workers, scheduler, DB and broker healthy Onboarding URL is ready →
ABOUT HOSTING

The self-hosted edition is the product available now. A managed edition may follow later; this release keeps the code, data path, and operating decisions in your hands.

Before you install

Clear answers.
No cloud-shaped fog.

Is BackupSheep free and open source?

Yes. The self-hosted application is licensed under GNU GPLv3. It is currently marked beta, so evaluate and operate it with the care you would give any backup system.

Does BackupSheep store my data?

The open-source edition runs in your environment. File and database archives go from your BackupSheep workers to the destinations you configure; provider-native snapshots stay with the cloud provider.

Are all restores handled the same way?

No. Websites and databases have console-driven restore workflows. Cloud servers and volumes are restored through the provider’s native snapshot workflow.

What do I need to run it?

The quickest route is a fresh Ubuntu 22.04+ or Debian 12+ server. The installer provisions the Docker Compose stack, including PostgreSQL and RabbitMQ. Add HTTPS before public exposure.

Is a hosted version available?

Not currently. The product available today is the self-hosted open-source edition; a managed edition may be offered later.