External Backups

Your NAS backs up your data locally. That's good, but if a fire destroys your premises, you lose everything: the original data and its backup. Bunker offers S3-compatible storage to externalize your backups and apply the 3-2-1 rule.

The 3-2-1 Rule

The 3-2-1 rule simply states:

• 3 copies of your data (the original + 2 backups)
• 2 different media (local disk + cloud, for example)
• 1 copy off-site (geographically distant)

With this approach, you're protected against:

• Hardware failure (a disk that fails)
• Human error (accidental deletion)
• Disasters (fire, flood, theft)
• Ransomware (your data encrypted by an attacker)

Objective

Configure your NAS to automatically send your backups to Bunker's S3 storage.

Prerequisites

• A Bunker account with object storage enabled
• An S3-compatible NAS (Synology, QNAP, TrueNAS, or other)
• Your S3 credentials (Access Key and Secret Key)

Retrieve Your S3 Credentials

1. Log in to the Bunker console
2. Go to Storage > Object Storage
3. Create a bucket for your backups (example: company-backups)
4. Note the connection information:
   • Endpoint: s3.getbunker.net
   • Access Key: your access key
   • Secret Key: your secret key
   • Bucket: the chosen name

NAS Configuration

Synology (Hyper Backup)

1. Open Hyper Backup
2. Create a new backup task
3. Select S3 Storage as destination
4. Enter:
   • Server: s3.getbunker.net
   • Access Key and Secret Key
   • Bucket: the one created previously
5. Select folders to backup
6. Schedule the frequency (once a day, at night)

QNAP (Hybrid Backup Sync)

1. Open Hybrid Backup Sync
2. Create a new sync job
3. Choose Cloud Storage > S3 Compatible
4. Enter the endpoint and your credentials
5. Configure source folders and scheduling

Other NAS

Most recent NAS support S3. Consult your manufacturer's documentation with these parameters:

• Endpoint: s3.getbunker.net
• Region: eu-west-1
• Signature: V4

Scheduling and Retention

Parameter	Recommendation
Frequency	Daily (night)
Retention	30 days minimum
Versioning	Enabled on bucket
Encryption	Enabled on NAS side

Tip

Enable versioning on your bucket to keep multiple versions of your files. Useful if you accidentally delete something.

Verification

After the first synchronization:

1. Log in to the Bunker console
2. Open your backup bucket
3. Verify that files are there
4. Test a restore on a non-critical file

Important

Regularly test (weekly or monthly) the restore. A backup you've never tested is not a real backup.

Common Errors

Error	Probable Cause	Solution
Access Denied	Incorrect S3 keys	Verify Access Key and Secret Key
Bucket not found	Wrong bucket name	Check exact spelling
Connection timeout	Firewall blocking	Allow outbound port 443
Signature mismatch	Wrong signature version	Configure S3 Signature V4

Next Steps

• Automatic backups for your Bunker resources
• API Reference to automate bucket management