BackupGuard: Encrypted Backups, Restore and Updates for Dolibarr

A question before buying? Write to me: contact@theopequignot.fr

Full documentation on the official Dolibarr wiki: wiki.dolibarr.org/index.php/Module_BackupGuard

The native Dolibarr backup relies on the mysqldump command, which many shared hostings and containers do not have or refuse to run ("Failed to execute external command"). It is not scheduled, not encrypted, and stays on the same server as the data. BackupGuard makes a complete, scheduled, encrypted, verified backup and sends it elsewhere, without installing anything on the server.

The dashboard: last successful backup, scheduling, server diagnostic, destinations and log.

What it does

• Pure PHP database dump: every Dolibarr table is read inside a consistent InnoDB snapshot and streamed to a SQL file. No binary needed, constant memory: the module fits in the 128 MB of a modest hosting. When mysqldump exists it can be used, with automatic fallback.
• Documents included: the documents directory is added file by file to a zip, with configurable exclusions (temp folders, cache, .tmp files).
• AES-256 encryption in the standard format of the openssl enc command: a backup can be decrypted on any machine with openssl, without Dolibarr or this module.
• Destinations, several at once: local copy, WebDAV (Nextcloud, ownCloud, kDrive, Infomaniak), S3 compatible storage (AWS, Scaleway, OVH, Backblaze B2, Wasabi, MinIO), FTP/FTPS, SFTP. A "Test connection" button shows the real error message of the remote server.
• Scheduling: daily job at the chosen hour (the Scheduled jobs module is enabled for you), a command line script for a system cron, and a URL with a secret key for hostings without any cron. "Back up now" button.
• Retention per destination: the N most recent backups, plus the first of each month for M months. Purge happens only after a successful upload.
• Systematic verification: zip integrity, end marker of the dump, SHA-256 checksum, control decryption. An incomplete backup is flagged as an error, never shown as good.
• Email alerts on failure, and when no successful backup exists for N days: a backup that silently stopped running is detected.
• Dashboard: last successful backup, scheduling state, server diagnostic, destinations, last thirty runs with download.
• Restore from the browser: upload the file, analysis without changing anything, every SQL statement checked, safety backup of the current state, then a restore followed live. If it stops halfway: "Retry" or "Go back to the previous state". Also used to move to a fresh Dolibarr. A command line script is still provided for very large databases.
• Dolibarr update: the maintenance release and the next major version are offered. The official package is checked file by file against the checksums published by Dolibarr; a full backup and a copy of the replaced files are made first, and a button puts the previous files back as long as the database has not been upgraded. In a Docker container, the module shows the steps to follow.

Settings: backup content, exclusions, and encryption with the openssl command to decrypt.

The WebDAV and S3 destinations, and the result of a connection test.

Restore and update from the browser

Restore: upload a file or pick a backup already on the server. Nothing is changed before the analysis and your confirmation.

Dolibarr update: server checks, maintenance release and next major version offered.

Who it is for

• Installations on shared hosting or in Docker containers where the native backup fails.
• Companies that want an encrypted copy off the server, without thinking about it.
• Integrators running several Dolibarr instances who want a log and alerts.

Scheduling: daily hour, real state of the job, trigger URL, command line, retention.

Installation

Home → Setup → Modules → "Deploy/install external app/module", upload the zip and enable BackupGuard. The first local backup works with no setting at all; then add a remote destination and the passphrase.

Alerts: recipient, delay without a successful backup, test email.

Compatibility

• Dolibarr 16 to 24, verified on 16.0, 18.0, 20.0, 22.0, 23.0 and 24.0.
• PHP 7.4 to 8.4. MySQL or MariaDB database (PostgreSQL: documents only). Extensions zip, openssl and curl; ftp and ssh2 depending on the destination.
• English and French included. Email support and updates for 2 years.