Deploy Kopia encrypted backup with deduplication on Ubuntu — supports S3, B2, SFTP, and local storage.
Grab the automated bash script from GitHub to follow along with the video.
wget https://raw.githubusercontent.com/mhmdali94/Docker/main/backup/kopia/kopia-ubuntu.sh
chmod +x kopia-ubuntu.sh
sudo bash kopia-ubuntu.sh
wget https://raw.githubusercontent.com/mhmdali94/Docker/main/backup/kopia/kopia-ubuntu.sh
chmod +x kopia-ubuntu.sh
The script installs Docker, then deploys Kopia with its web UI automatically.
sudo bash kopia-ubuntu.sh
Open your browser and navigate to:
http://<your-server-ip>:51515
Choose your storage backend — S3, Backblaze B2, SFTP, or local — set your encryption password and start your first snapshot.
| Port | Purpose |
|---|---|
| 51515 | Kopia Web UI |
Kopia is a fast, secure, open-source backup tool that performs encrypted, compressed, and deduplicated snapshots of your data to local or cloud storage. Its content-addressed storage means only changed blocks are uploaded, dramatically reducing backup size and time.
Kopia fills the gap between Restic (CLI-only) and Duplicati (old, slow). It has the same AES-256 encryption and content-defined deduplication as Restic, but adds a clean web UI for scheduling, monitoring, and restoring — without requiring CLI knowledge. Ideal for self-hosters who want serious backup tooling with a dashboard.
Port 51515 for the Kopia web UI. No other inbound ports. Kopia makes outbound connections to your chosen backend (S3, B2, SFTP, etc.). Put Nginx Proxy Manager in front for HTTPS. Keep 51515 internal only and access via reverse proxy.
Direct alternatives: Restic (CLI-only, same feature set, no web UI), Duplicati (older, GUI-based, slower), BorgBackup (Linux-focused). Cloud-managed: AWS Backup, Veeam (enterprise). Kopia is the best choice when you want Restic-level quality with a dashboard.
Don't use Kopia if you need Kubernetes-native backup — use Velero. And if your team is fully CLI-comfortable, Restic is equally capable and more widely documented. Kopia's web UI is its main advantage; if you don't need it, either tool works.
PrismaTechWork provides end-to-end infrastructure services — from initial deployment and security hardening to ongoing monitoring, automated backups, and dedicated support. Whether you need a single-server setup or a multi-site network, our team ensures your infrastructure is built right, secured properly, and maintained reliably.
All snapshots become permanently inaccessible — there is no password recovery. Store your password in a password manager and keep a printed copy offsite. Treat it like a private key.
Yes — Kopia supports Google Drive natively. Set up a Google Cloud service account, download the JSON credentials, and configure the GCS or Google Drive backend in the Kopia UI.
Both offer AES-256 encryption and deduplication. Kopia adds a web UI, a built-in policy engine with scheduling, snapshot mounting, and a centralized Repository Server for multi-client setups. Restic is CLI-only but has a larger community and more documentation.
Yes — use Kopia Repository Server mode. Run one Kopia server that hosts the repository, and configure client machines to connect to it. Each client gets its own snapshot history.
In the web UI, go to Snapshots → select a snapshot → browse files → click Restore. Via CLI: `kopia snapshot restore SNAPSHOT_ID /restore/path`. You can also mount a snapshot as a read-only filesystem.
Yes — content-defined deduplication means only new or changed chunks are uploaded. After the first full backup, incremental snapshots are fast and space-efficient, regardless of file size changes.
In the Kopia web UI, go to Policies → select a source → set a Schedule (hourly, daily, weekly). Kopia runs snapshots automatically. You can also use `kopia policy set --scheduling-cron '0 2 * * *' /path`.
Run `docker compose pull && docker compose up -d`. Kopia is backward-compatible with older repository formats. Check the changelog for any repository format changes before upgrading across major versions.