Encrypt with OpenSSL

Create a password-protected backup file with my_password as the password.

  1. encrypt_with:
  2.   type: openssl
  3.   password: my_password
  4.   # (enabled by default) improves the security.
  5.   salt: true
  6.   # makes encrypted backups readable in text editors, emails, etc.
  7.   base64: false

This will encrypt your backup file using OpenSSL aes-256-cbc.

Decrypting your backup file

To decrypt your backup, use the following command:

  1. $ openssl aes-256-cbc -d -base64 -in my_backup.tar.gz.enc -out my_backup.tar.gz

-base64 is only required if you used base64: true.

You will be prompted for your password.