October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PCOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
VGSources
Blog

How to Build a Backup Server With BackupPC on a VPS

Learn how to build a secure BackupPC server on a VPS, size storage with pooling and retention, back up Linux clients over rsync SSH, and verify real restores.
Length11 min Posted Quest giverVGSources Team
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Yes—you can run BackupPC on a VPS and use it as a centralized, disk-based backup server for Linux and other Unix-like systems. The reliable design is a VPS with persistent, expandable storage; a protected BackupPC service account; rsync over SSH for clients; carefully scoped privileges; and routine restore tests. BackupPC stores full and incremental backups in a pooled, optionally compressed data store, so capacity depends on your retained data, change rate, filesystem overhead and recovery headroom—not on one universal VPS size.

This guide takes you from storage planning through installation, host configuration, security hardening, first backups and restores. It also explains when rsync, tar, rsyncd or SMB is appropriate and where a single VPS backup server still leaves a disaster-recovery gap.

As an Amazon Associate I earn from qualifying purchases.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What BackupPC does on a VPS

BackupPC is a centralized backup-to-disk system. A service running on the VPS connects to client machines, transfers selected files, and stores the result on the VPS’s local or attached storage. The project describes it as “a high-performance, enterprise-grade system for backing up to a server’s disk.”

For Linux and Unix clients, the usual path is rsync over SSH. BackupPC can also use tar over SSH, direct rsyncd connections and SMB transfers. Backups are browsable from its CGI web interface, where an administrator can download files or send a restore back to a client.

#1 Best Overall
Sale
Gaoye Blue Light Blocking Glasses
  • BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
  • EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
  • COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
  • LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
  • WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.

The VPS is only the backup engine and storage location. If the VPS provider, account, storage volume and network path share one failure domain, a compromise or provider outage can remove both production data and its backups. Keep a second recovery path or an off-site copy for important systems.

Requirements before you provision the VPS

A supported Unix-like operating system

Choose a Unix-like distribution supported by the BackupPC release you intend to install. Package names and versions differ by distribution, so check the distribution package index and the current BackupPC release instructions before installing. A source installation’s quick start identifies BackupPC::XS and rsync-bpc as required components.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Persistent, expandable storage

BackupPC needs a substantial amount of free disk space. Select persistent storage rather than an ephemeral VPS disk, and prefer expandable LVM or RAID-backed storage where your provider offers it. Plan for retained full backups, incrementals, data growth, deduplication metadata, compression overhead, logs and temporary space used while restoring.

Keep the BackupPC data store on one suitable filesystem whenever possible. Moving data across filesystems can become an expensive copy operation, so splitting the pool casually across mount points can hurt performance and complicate capacity management.

Network and administration access

  • Allow outbound SSH from the BackupPC host to each client, or the reverse direction required by your chosen transfer method.
  • Provide administrative access to the VPS without exposing the BackupPC web interface broadly to the public internet.
  • Have a plan to expand the storage volume before it reaches capacity.
  • Reserve CPU and disk I/O for backup jobs; simultaneous transfers are limited by the VPS’s CPU and storage performance.

How much storage BackupPC needs

Do not size a BackupPC VPS from a single advertised ratio. Start with the data that must be recoverable, then model retention and daily change. A practical planning expression is:

required capacity = retained full data + retained incremental changes + growth allowance + BackupPC metadata and filesystem overhead + restore working space.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Measure a representative full backup and the typical incremental change for each host. Apply your actual number of retained full and incremental copies, then add headroom for growth and a restore in progress. Pooling identical files across backups and clients, together with compression, can reduce the physical footprint substantially, but neither feature removes the need for free space.

Rank #2
Windex Gaming Cleaning Wipes, Pre-Moistened Wipes to Instantly Clean all Gaming Gear and Electronics, Resealable Packaging for a Freshness Lock, 25 count (Pack of 1)
  • WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
  • AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
  • PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
  • ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
  • COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed

Illustrative pooling example

BackupPC documentation gives this historical illustration: 95 laptops with each full backup averaging 3.6 GB and each incremental averaging about 0.3 GB. Keeping three weekly full backups and six incremental backups per laptop represents around 1,200 GB of raw data; pooling and compression reduce the stored requirement to about 150 GB. Those figures demonstrate the mechanism, not a guarantee for your VPS. Your files, retention policy, compression behavior and change rate may produce a very different result.

Item in the illustration Value
Clients 95 laptops
Average full backup 3.6 GB per laptop
Average incremental backup About 0.3 GB per laptop
Retained full backups Three weekly full backups per laptop
Retained incremental backups Six per laptop
Raw data represented About 1,200 GB
After pooling and compression About 150 GB

Use your first completed full and several incrementals to replace estimates with measurements. Monitor pool growth, free space, inode usage and restore temporary space, not just the nominal disk size.

Install BackupPC and its components

Use distribution packages when they match your release

On a distribution with maintained BackupPC packages, install the package and its Perl dependencies with that distribution’s package manager, then confirm which binaries and service account the package created. A typical package workflow is to refresh package metadata, install BackupPC, rsync and the SSH client, enable the service, and verify its status. Do not assume package names or configuration paths from another distribution.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Build from source when the package is unsuitable

If you install a current release from source, account for the required BackupPC::XS and rsync-bpc components identified by the project’s quick start. Check the release documentation for compatible Perl modules, install paths and service integration before compiling. Keep the resulting binaries and configuration under administrative control, and record the exact release so you can reproduce the installation during a recovery.

Create and protect the service identity

Run the daemon as a dedicated BackupPC account rather than as an interactive administrator. Protect its configuration, pool, logs and private SSH keys with ownership and permissions that prevent ordinary users from writing privileged command paths or changing configuration. BackupPC’s configuration comments specifically warn against allowing untrusted users to write those locations.

Confirm the service account can read its SSH private key, access the data store and write logs, but cannot be used as a general-purpose login account. Disable interactive login for the account unless your operating procedure requires it.

Prepare each Linux client for rsync over SSH

Install rsync 3.x

Each Linux or Unix client should run rsync 3.x. The BackupPC server uses the project-compatible rsync-bpc implementation, while clients use their normal rsync 3.x binary. Verify the client version and the path to the binary before adding the host.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
Sale
LISEN Cell Phone Stand Phone Holder for Desk, Office Decor Gadgets for Men
  • Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
  • Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
  • Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
  • ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
  • Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)

Create a dedicated account

Create a regular account used only for backups. Exchange an SSH key from the BackupPC service account to that client, and restrict the authorized key where practical by limiting source address, disabling interactive features and preventing forwarding. SSH provides both authentication and encryption for the transfer.

Grant only the required read privilege

The backup account must be able to read every path selected for backup. If those paths require elevated access, use sudo for the rsync operation instead of enabling unrestricted root SSH. The official guidance recommends a regular user with sudo permission limited to rsync. Do not grant a shell, a wildcard command that permits arbitrary programs, or blanket passwordless root access. After writing the rule, inspect it with sudo -l -U backup-account and verify that it permits the intended rsync invocation and nothing else.

Keep the sudo rule synchronized with the rsync path and arguments generated by BackupPC. A rule that is too narrow causes permission failures; one that is too broad turns the backup key into a route to full root command execution.

Configure hosts, shares and transfer settings

Add a host and select rsync

Add each client to BackupPC’s host configuration and set XferMethod = 'rsync'. In the per-host settings, specify:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • the client rsync executable path;
  • the server-side rsync_bpc path;
  • SSH arguments and the identity file used by the BackupPC service account;
  • the share or filesystem to back up;
  • include and exclude rules;
  • restore arguments and the destination behavior.

Keep host-specific settings in the per-host configuration so one exception does not silently change every client. Test SSH from the BackupPC service account, not from your personal account; different keys, known-host files and permissions can otherwise hide a configuration error.

Choose what a Linux root backup contains

A root-filesystem backup must avoid pseudo-filesystems and volatile paths. Exclude paths such as /proc and /run, and consider excluding sparse or rapidly changing log files when they are not part of the recovery requirement. Another approach is to back up each real filesystem separately with --one-file-system. Choose the method that matches your restoration plan: a system rebuild may need configuration and application data, but not kernel-mounted runtime state.

Document every exclusion. An exclusion that makes a job complete faster is still a data-loss decision if the omitted path contains unique application state.

Rank #4
Ledagic IC+RGBW USB Powered Led Light Bar with App & Remote Control, 2 Pack
  • Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
  • Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
  • 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
  • Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
  • USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC

Set include and exclude rules deliberately

Start with the smallest set that produces a usable recovery: operating-system configuration, service definitions, application data, user data and any database dumps created by a database-aware procedure. Avoid backing up caches and generated temporary files unless they are required. Review rules after software changes; a newly introduced data directory is not protected until it is included.

Compare BackupPC transfer methods

The transfer method affects encryption, privileges, metadata, firewall exposure and restore behavior. Unix metadata generally fits rsync or tar better than SMB; SMB has separate client and server requirements.

Method Encryption Privilege model Unix metadata Firewall and operations
rsync over SSH Encrypted by SSH Regular account with narrowly scoped sudo is supported Strong fit for Unix ownership, modes and links when configured correctly Uses SSH access; one secure channel and straightforward key management
tar over SSH Encrypted by SSH SSH account and optional narrowly scoped sudo Good fit for Unix metadata Simple streaming model; restore behavior follows the tar archive and options
rsyncd Authentication is available, but the direct connection has no encryption Daemon modules and their permissions must be managed separately Suitable for rsync data, subject to daemon configuration Requires an exposed rsync daemon port; use SSH tunneling or another secure wrapper if it is unavoidable
SMB Depends on the SMB deployment and network protection SMB users, shares and credentials Often less suitable for Unix metadata than rsync or tar Useful for compatible clients, but introduces SMB-specific configuration and exposure

SSH is the default secure path for rsync or tar. The project’s FAQ describes SSH as a secure way to run tar or rsync on a backup client to extract data. Use direct rsyncd only when its operational advantages outweigh the lack of encryption and you have added a secure wrapper.

Set schedules, retention and concurrency

Schedule full and incremental backups

Choose full-backup frequency based on how quickly you must recover and how much storage and bandwidth the VPS can sustain. Incrementals capture changes between fulls and are usually cheaper to run. Set retention counts explicitly: the number of fulls and incrementals is a capacity decision, not merely a calendar preference.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Match concurrency to the VPS

BackupPC documentation notes that CPU and disk performance determine how many simultaneous backups can run. Start with conservative concurrency, observe I/O wait, CPU saturation and transfer failures, then increase only when the storage system remains responsive. A low-cost VPS can become unusable if many full backups compete for the same virtual disk.

Configure notifications

Enable email notifications for failed, partial and successful jobs according to your operating needs. A successful scheduler run is not proof that files were transferred; review the per-host transfer log and alert on errors, skipped shares and authentication failures.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Run the first backup and verify it

  1. Confirm the host resolves to the intended client and that SSH from the BackupPC service account succeeds with the selected key.
  2. Run one initial full backup for the host.
  3. Read the per-host log from the CGI interface and look for permission errors, excluded paths, rsync protocol failures and storage warnings.
  4. Check that the pool grew as expected and that the host reports a completed full backup.
  5. Run an incremental backup after creating or changing a known test file.
  6. Browse the backup in the web interface and download the test file.
  7. Perform a directory restore to a temporary destination, then compare ownership, modes, timestamps and contents.
  8. Test a permissions-sensitive file and record the restore procedure for other administrators.

Perform the first restore while you still remember the configuration choices. Restore testing catches wrong shares, over-broad exclusions, unreadable files and destination-permission problems that a green backup status can miss.

Best Value
Sale
HUANUO FlowLift™ Dual Monitor Stand, Fully Adjustable Gaming Monitor Desk Mount for 13–32″ Computer Screens, Full Motion VESA 75x75/100x100 with C-Clamp & Grommet Base, Each Arm Holds 4.4 to 19.8 lbs
  • Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
  • Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
  • Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
  • Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
  • Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.

Protect the BackupPC server

Lock down the web interface

Protect the CGI interface with the VPS’s normal administrative access controls and a TLS-capable reverse proxy. Require authenticated access, restrict administrative routes to trusted networks where possible, and avoid exposing an unauthenticated backup browser to the public internet.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Protect keys and configuration

  • Store the BackupPC private SSH key with permissions readable only by the service account.
  • Keep host configuration, credentials and restore settings out of world-writable directories.
  • Ensure ordinary users cannot write directories that contain privileged helper commands.
  • Review authorized keys on every client and remove keys for decommissioned hosts.
  • Separate administrative access to the VPS from the account used for routine backup transfers.

Plan for compromise and failure

A backup server with write access to production hosts is a high-value target. Limit client-side privileges, monitor SSH and BackupPC logs, and maintain a second recovery path. If an attacker can delete the VPS and its attached volume, local pooling and compression cannot help; an off-site or otherwise independent copy is required for disaster recovery.

Troubleshoot common failures

SSH authentication fails

Test as the BackupPC service account, verify the private-key permissions and known-host entry, and confirm the client account’s shell and authorized-key restrictions. Check that the host name in BackupPC resolves to the same address you tested manually.

Rsync reports permission denied

Confirm the client account can read every included path. If elevated access is required, inspect the sudo rule and the exact rsync command BackupPC is invoking. A rule that permits a different binary path, or forbids one generated option, will fail even when ordinary SSH works.

Backups grow faster than expected

Review retention counts, newly included directories and daily change rates. Check whether duplicate data is actually being pooled and whether compression is enabled as intended. Leave restore headroom and expand the volume before free space becomes critical.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Jobs are slow or overload the VPS

Reduce simultaneous jobs, stagger full backups and inspect storage latency and CPU wait. Cross-filesystem data movement can turn into expensive copies, so keep the data store on one suitable filesystem where possible.

A restore is incomplete

Check the backup selection, excluded paths, restore arguments and destination permissions. Compare a downloaded file with the source and test a representative directory rather than assuming that a browsable backup contains every required path.

Routine operating checklist

  • Confirm every host has a recent successful full or incremental backup.
  • Review transfer and error logs after the first run and after configuration changes.
  • Test a single-file restore, a directory restore and a permissions-sensitive file.
  • Watch storage, inode consumption, pool growth and restore working space.
  • Confirm the storage volume can be expanded before it reaches capacity.
  • Review client SSH keys, sudo rules and BackupPC web access.
  • Maintain a second recovery path or off-site copy outside the VPS failure domain.

With expandable storage, least-privilege SSH, deliberate filesystem exclusions and recurring restore tests, a VPS can provide a practical centralized BackupPC service. Treat capacity as a measured, workload-specific calculation and treat the VPS as one layer of a broader recovery plan—not as the only copy of your data.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Leave a Reply

Your email address will not be published. Required fields are marked *

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More quests from Patch Notes

  1. How to Set Up a RedM (RDR2) Server in 2026: License Key, txAdmin and server.cfg, Step by StepBlog11min
  2. Best RedM (RDR2) Server Hosting in 2026: Comparing Four Hosts on Slots, Memory and PriceBlog10min
  3. How to Host a Mindustry Server in 2026: server-release.jar, Port 6567 and the Commands That MatterBlog7min
Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.