Backup question

[wcocaboose]

I have a couple quick questions regarding web server backups before I roll my own solution.

What is the frequency of backup performed by NFO, and how many historical backups are kept?

Are MySQL databases backed up as part of NFO's backup process?

[TimeX]

The backups are performed every morning and include the files and the SQL databases. I think only the most recent backup is kept in most cases, but sometimes older backups are available. Edge may need to correct me on that last detail.

[Edge100x]

Backups are mostly meant for disaster recovery purposes, so we can't guarantee specific date ranges, and while MySQL files are backed up completely, it's not always possible to restore individual databases (whether it can be done depends on the database type). That said, right now we go back daily for 30 days with our backups, and for MyISAM, we have a high degree of success in recovering requested databases.

I would recommend taking your own backups at least occasionally, to be safe.

[wcocaboose]

I currently backup my sites twice a month or so.

I'm looking at setting up a cron job to do a daily backup of my mysql databases and file system. The only problem is I have to code my mysql password into the script in plan text for the backups to work via cron; which is very bad security.

Does anyone here know of a way to perform scripted backups of mysql databases without providing the password in plain text; or if there is a permissions set I can apply to the script that will block all access except for from an SSH session.

If anyone here has other ways to accomplish this I would love to hear them

[wcocaboose]

I guess I've managed to stump the user base with this one.

Would a chmod of 700 to the script file prevent anyone but my SSH user account from accessing or executing the script in any way? And is this a safe method to use providing my ssh account password is outlandishly complex?

[Edge100x]

I don't know a way of doing it apart from hardcoding the password, unfortunately.

Yes, setting 700 on the file would keep all other users from being able to access it. As long as you keep it in a folder that is not reachable through the web, it will be safe from prying eyes.

[IcEWoLF]

@wcocaboose I'd suggest checking out webhostingtalk.com and see if they have any suggestions regards to your question, those guys are geniuses .

Edge, you guys should consider implementing one click backup/ One click restore. (like cPanel)

Not sure if you had the chance to use it but it works wonders and never failed me when restoring. (I use a custom hosting solution on a vds)

I think if you really wanted you could implement something like that with your custom control panel just like your game server backups option for VDS/Dedicated customers have access to.
I've been asking for such feature for years now.

The current system requires clients to contact you directly through support and request for you specifically to have them backup something in case something were to happen unless other staff members can do this process now...(Sorry if I am incorrect here, I haven't used your hosting in a while)

Anyways, I am done rambling.

[Edge100x]

Yes, IcEWoLF, you have requested this previously, as have a couple of other customers.

Right now our webhosting backup system is one-way -- files just go in -- and changing it from that by having a daemon run that can restore files and folders for customers would/will be complicated due to security concerns; a single backup machine is used for all of our webhosting services, meaning that a breach would be a very big deal. Additionally, there are synchronization concerns while the backups are running, and the backup machine is so critical to disaster recovery that I don't want to have additional processes running on it. All in all, adapting to add the feature you described is going to be a serious (and somewhat costly) undertaking that will need to be approached carefully. With other more important, more customer-affecting, and more-requested tasks on the docket, I just have not had time to launch into that process yet.

Game server backups work much differently. Minecraft servers have access to snapshots that are also done much differently. VDSes are not backed up, though they are on RAIDs (as are all webhosting accounts).