KEEP
// homelab backup console · hardened fork of borg-ui
A self-host-only fork of borg-ui, the web interface for BorgBackup. Run, schedule and monitor backups, browse archives and restore from them, and manage repositories and the machines that push to them. Every phone-home path is removed, every feature is on with no plan gate, and the default compose file asks for less of the host.
- > Repositories over local disk, SSH, SFTP and rclone destinations, with retention, prune and pre/post hooks
- > No analytics, no consent banner, no remote announcements — nothing leaves the host unless a backup does
- > Docker socket mount is opt-in, privileged mode is gone, and the filesystem browser is role-gated
- > Internal deploy — no public domain
> what it does
KEEP is a web console for BorgBackup. It runs and schedules backups, shows their progress live, browses the archives they produce and restores files out of them, and manages the repositories and remote machines involved — including a fleet of agents that push to one central instance.
It is a fork of borg-ui, cut down to the self-hosted case. Every path that called home is gone: analytics never load, the consent banner is removed, and announcements are served locally. Every feature is enabled with no plan gate. The default deployment asks for less: the Docker socket mount is opt-in, privileged mode is dropped, the filesystem browser is role-gated, SSH host keys are checked, and the first login gets a random password.
> what’s inside
- >Repositories over local disk, SSH, SFTP and rclone destinations, with retention, prune and pre/post hooks.
- >Managed agents that back up remote machines to a central instance, with SSH key deployment.
- >Notifications through Apprise to any of the services it supports.
- >Scheduled rclone folder sync — copy, mirror or two-way — for admins.
- >OIDC sign-in, and a guided setup for Hetzner Storage Box targets.
> why it exists
A backup tool sits next to everything you own and holds a copy of it. That is the one piece of software that should not be reporting anywhere, and should not need root on the host to do its job.
Internal deploy — no public domain. Upstream borg-ui is licensed AGPL-3.0, and so is this fork.