Review restore-1password-backup doc: fix offsite TBD, clarify archive name, add BorgBase to backups

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Erich Blume 2026-03-15 10:12:53 -07:00
commit 4d195f7fb4
3 changed files with 14 additions and 6 deletions

View file

@ -1,6 +1,7 @@
--- ---
title: Restore 1Password Backup title: Restore 1Password Backup
modified: 2026-02-10 modified: 2026-03-15
last-reviewed: 2026-03-15
tags: tags:
- how-to - how-to
- operations - operations
@ -13,7 +14,7 @@ How to recover a 1Password `.1pux` export from a [[borgmatic]] backup. This proc
## Prerequisites ## Prerequisites
- A copy of the borg backup repository (from [[sifaka]], or an off-site copy — TBD) - A copy of the borg backup repository (from [[sifaka]], or the BorgBase offsite repo)
- `borg`, `age`, and `openssl` installed on any machine - `borg`, `age`, and `openssl` installed on any machine
- Your **1Password Emergency Kit** (fire safety box) — contains the master password and secret key - Your **1Password Emergency Kit** (fire safety box) — contains the master password and secret key
- The borg repo passphrase (printed on the Emergency Kit, or from `/Users/erichblume/.borg/config.yaml` if [[indri]] is accessible) - The borg repo passphrase (printed on the Emergency Kit, or from `/Users/erichblume/.borg/config.yaml` if [[indri]] is accessible)
@ -30,7 +31,11 @@ If you have direct access to the borg repository (e.g. mounted from [[sifaka]] o
```bash ```bash
mkdir -p /tmp/op-restore && cd /tmp/op-restore mkdir -p /tmp/op-restore && cd /tmp/op-restore
# List recent archives — pick one from the output (e.g. "indri-2026-03-15T02:00:07")
BORG_PASSPHRASE="<your-borg-passphrase>" borg list /path/to/borg/repo --last 5 BORG_PASSPHRASE="<your-borg-passphrase>" borg list /path/to/borg/repo --last 5
# Extract using the archive name from the list above
BORG_PASSPHRASE="<your-borg-passphrase>" borg extract \ BORG_PASSPHRASE="<your-borg-passphrase>" borg extract \
"/path/to/borg/repo::<archive-name>" \ "/path/to/borg/repo::<archive-name>" \
Users/erichblume/Documents/1password-backup/ Users/erichblume/Documents/1password-backup/

View file

@ -1,6 +1,6 @@
--- ---
title: Backups title: Backups
modified: 2026-02-10 modified: 2026-03-15
tags: tags:
- storage - storage
- backup - backup
@ -55,9 +55,12 @@ Some data lives directly on [[sifaka]] rather than being backed up to it (photos
| Monthly | 12 backups | | Monthly | 12 backups |
| Yearly | 1000 backups | | Yearly | 1000 backups |
## Backup Target ## Backup Targets
Repository: `/Volumes/backups/borg/` on [[sifaka|Sifaka]] | Repository | Location | Label |
|------------|----------|-------|
| `/Volumes/backups/borg/` | [[sifaka]] (local NAS) | — |
| `ssh://u3ugi1x1@u3ugi1x1.repo.borgbase.com/./repo` | BorgBase (offsite) | `borgbase-offsite` |
## Monitoring ## Monitoring

View file

@ -315,7 +315,7 @@ def main() -> int:
console.print() console.print()
console.print("[bold]DISASTER RECOVERY:[/bold]") console.print("[bold]DISASTER RECOVERY:[/bold]")
console.print(f" 1. Restore borgmatic archive containing {REMOTE_DIR}/") console.print(f" 1. Restore borgmatic archive containing {REMOTE_DIR}/")
console.print(" 2. Retrieve Emergency Kit from safety deposit box") console.print(" 2. Retrieve Emergency Kit from fire safety box")
console.print(f" 3. openssl enc -d -aes-256-cbc -pbkdf2 < ...key.enc > key.txt") console.print(f" 3. openssl enc -d -aes-256-cbc -pbkdf2 < ...key.enc > key.txt")
console.print(" Passphrase: {master_password}:{secret_key}") console.print(" Passphrase: {master_password}:{secret_key}")
console.print(f" 4. age -d -i key.txt < ...age > export.1pux") console.print(f" 4. age -d -i key.txt < ...age > export.1pux")