Encrypted backups of your Linux servers.

01  /  set it up

A backup job in a minute.

In the web cabinet open Account → Backups → + Add backup, or in the desktop app Settings → Account → Backups. A job is a small set of choices:

• ▸The server — any Linux server with a Connector.
• ▸Paths to include (absolute), with optional exclude patterns.
• ▸A schedule — manual, hourly, daily (at an hour in UTC, 03:00 by default) or weekly (Sunday at that hour).
• ▸How many to keep — the newest N successful archives, 1 to 365, 7 by default.
• ▸Read speed limit, MB/s — so a run doesn’t hog the disk and network your server needs; 20 is a safe default, 0 means no limit.

You can also Run now at any time. If a run fails, the error shows right there.

02  /  light on the server

Nothing installed. Nothing left behind.

A run opens the same keyless SSH session the web terminal uses, starts tar at the lowest CPU and I/O priority (nice -n 19, ionice -c 3), and streams the archive back. There is no agent to install and nothing is written on the server. When the backup finishes, the tar process exits — that is the whole footprint.

03  /  encryption

Only you can open an archive.

The archive is encrypted frame by frame, with a fresh data key wrapped for an X25519 key you create in the cabinet or the app. The private half lives in your vault under your master password, so Termalin storage, S3 and your own server only ever hold ciphertext.

• ▸Decrypt & save works in the browser (WebCrypto) and in the desktop app — a key made in one opens archives in the other.
• ▸Not “end-to-end.” While a run is being encrypted the stream passes through our backend in memory — the same trust the web terminal asks for. It is encrypted before it is stored, and only you hold the key.

04  /  where archives go

Three places to keep them.

Set a destination under Your storage. Pick one per job; archive lists show where each file lives — the server and full path, or the bucket and key.

Destination	Notes
Termalin storage	One pool shared with session recordings: Pro 25 GB, Team 100 GB. Recordings keep priority — a backup that would not fit does not start.
Your own S3 bucket + Add S3 bucket	Any S3-compatible bucket — AWS, Backblaze B2, Cloudflare R2, Hetzner, MinIO. Doesn’t count against the Termalin pool.
My server (via Connector) + Add my server	Over SFTP to another of your servers with a Connector — a second VPS or a home NAS. Default folder termalin-backups in the sign-in user’s home; relative or absolute path, created if missing. Encrypted, and doesn’t count against Termalin storage.

05  /  when something fails

You hear about it.

A failed scheduled run is sent the way alerts are: email by default, plus push to the iOS app, Telegram (one tap connects the bot), and a webhook that Slack and Discord accept as is. A manual Run now shows the error on the spot.

06  /  AI agents

A backup before a risky change.

Through Termalin’s hosted MCP endpoint, an agent like Claude or ChatGPT can take a backup before a migration, a config rewrite or a bulk delete:

• ▸backup_create runs a job now and waits for it, and records why in a label. It needs a job you set up first, and a Connector whose AI policy is full access. See backup_create.
• ▸backup_list shows the jobs and recent archives — whether last night’s backup worked, how big it is, where it went. It follows your read rules. See backup_list.
• ▸The agent can never read an archive — the key is yours.

07  /  plans and limits

Part of Pro and Team.

Backups need a Connector, so they come with the paid plans. The 14-day Pro trial includes them; Free has no backups.

	Pro	Team
Backup jobs	20	100
Largest single archive	4 GB	20 GB
Termalin storage pool	25 GB	100 GB

Need more room? Extra storage adds +100 GB for $2.99/mo or +1 TB for $19.99/mo, paid monthly from your balance and shared by recordings and backups. An S3 bucket or your own server doesn’t count against the pool at all. See pricing →

08  /  restoring

Getting your files back.

To restore, use Decrypt & save to get the plain .tar.gz, then copy it to the server over SFTP and unpack it. A one-click restore is on the list, not built yet. Because you hold the key, a restore is yours to run end to end.