Restricting SimpleBackups permissions

How to restrict what SimpleBackups may access.

It depends on the backup type.

File Backups

Set up a user with READ access on the folders that you need to back up, and just WRITE permission on the operations directory.

iNote

SimpleBackups does not required root or sudo to run, so you can completely contain the scope of operation.

The operations directory is where SimpleBackups stores files required for its operation. Example, backup log during a running backup, rclone which is used to send backups to your storage.

Database Backups

Set up a user with READ access on the databases you need to back up.

Storage Backup

You can give SimpleBackups as little permissions as possible on your storage. It depends on the storage, but just read/write to where backups should be stored it fine. You may also connect a read-only storage and do not provide SimpleBackups with a write permission if you prefer.