Identity

Binary: borg (borgbackup package)
No daemon: borg runs on-demand; no persistent service for local use
Wrapper: borgmatic — YAML-driven automation layer over raw borg commands
Remote hosting: Borgbase (borgbase.com), rsync.net (both offer borg-specific plans)
Key env vars:
- BORG_REPO — default repository path; avoids repeating it in every command
- BORG_PASSPHRASE — repository encryption passphrase; set for unattended backups
- BORG_UNKNOWN_UNENCRYPTED_REPO_ACCESS_IS_OK=yes — required to access unencrypted repos without interactive prompt
Install: apt install borgbackup / dnf install borgbackup / pip install borgbackup

Key Operations

Operation	Command
Initialize repo (repokey, passphrase in env)	`borg init --encryption=repokey /path/to/repo`
Initialize repo (keyfile, key stored locally)	`borg init --encryption=keyfile /path/to/repo`
Initialize unencrypted repo	`borg init --encryption=none /path/to/repo`