A backup holds the configuration: accounts (with their password hashes and second factors), household, hours of Internet, times a day, school holidays, devices, rules, decisions on suggestions, categories, settings, the proxy auto-configuration, the acceptance of the terms of use, the choice of the anonymous statistics and administration log. It never holds the query journal nor the statistics. It is compressed and encrypted with a key derived from the backup password (Argon2id, XChaCha20-Poly1305), chosen on the System page; the service keeps that key, so that it can back up every night on its own, and the password is asked again only to restore.
- Every night at 01:30 a backup is written in
/var/lib/warda/backups(the last 7 are kept); at 01:45warda-backup-usb.timer(root) copies them to the first USB drive plugged into the box (FAT or exFAT, not mounted, not the system disk), folderwarda-backups(the last 7 kept there too), and unmounts it. - The System page downloads a backup at any time (password of your account asked again) and restores one: Warda checks it, restarts and replaces the configuration before anything else starts; the journal and the statistics start again. A backup without an administrator account is refused.
- A new box restores a backup at installation, after the sign-in with the default password, instead of creating new accounts.