506854d597d4f75305698f7099d30bf0b99b932c
- migration: ngb_targets, ngb_runs, ngb_snapshots - KeyService: master key stored encrypted with the instance secret (unattended backups), passphrase-wrapped copy in every repository and in the recovery kit, recorded admin confirmation per key fingerprint - TargetService: locations built from files_external backends without a mount; files_external is loaded through IAppManager::loadApp() and its enabled state is left alone; credentials encrypted with ICrypto; existing repositories are adopted only if made with this key, and a repository cannot be registered twice - Repository: initWithKey/openWithKey with an encrypted key check - occ: backup:key:init|kit|confirm, backup:target:backends|add|list|remove
NG Backup
Encrypted, incremental backups of Nextcloud with restore from the web interface. Works without shell access: no external programs, no extra PHP extensions beyond sodium.
Status: phase 0 (prototype). Not usable yet. See PLAN.md for the design.
License: AGPL-3.0-or-later.