# Restic backups

Restic backs up the media volume to the offsite bucket every night at 01:20
with a lock timeout of five minutes.

- The repository password lives in the vault, never in the env file.
- Prune keeps fourteen daily and eight weekly snapshots.
- Verification runs one read pass every Sunday, sampled rather than full.
- A failed lock means the previous run is still going; check before
  forcing anything.
- Restores are tested quarterly against a scratch directory.

The media volume changes slowly, so a nightly run is usually small and the
sampled verification is enough to catch a corrupt pack file early.