In the commands below, replace <IP> with your backup storage IP and u<service ID> with your username. You will find both values as well as the ready-made commands in the client area under Services → your Backup Storage → “Zugangsdaten” (credentials). Access only works from inside your private network (VXLAN).
NFS (Linux) — Port 2049
mount -t nfs4 <IP>:/backup /mnt/backup
You can optionally restrict NFS access to specific IP addresses/networks in the client area.
SMB3 (Windows/Linux/macOS) — Port 445
Set an SMB password in the client area first. Connecting on Linux:
mount -t cifs //<IP>/backup /mnt/backup -o username=u<service ID>,vers=3.1.1,seal
On Windows: open \\<IP>\backup in File Explorer and sign in with the user u<service ID>. seal enforces encryption.
SFTP — Port 22
sftp -i ~/.ssh/mbs-sftp u<service ID>@<IP>
With restic over SFTP:
restic -o sftp.args="-i ~/.ssh/mbs-sftp" -r sftp:u<service ID>@<IP>:/home/restic init
SSH shell — Port 22
ssh -i ~/.ssh/mbs-ssh u<service ID>@<IP>
You get a restricted shell (file tools and archivers such as tar/zip/7z) within your storage area.
rsync — Port 2222
rsync -av -e "ssh -p 2222 -i ~/.ssh/mbs-rsync" ./daten/ u<service ID>@<IP>:sicherung/
Borg — Port 2222
BORG_RSH="ssh -p 2222 -i ~/.ssh/mbs-borg" \ borg init -e repokey ssh://u<service ID>@<IP>:2222/./home/borg
Important: the right key for each access
You need SSH keys for SFTP, SSH, rsync and Borg. Use a separate key for each access and specify it with -i ~/.ssh/mbs-<purpose>. Details in the article “Setting up SSH keys”.
