backupwitness
Docs

Hetzner Object Storage: a key for BackupWitness

Project-wide key, narrow with a policy

Hetzner S3 credentials can read and write every bucket of their project. Hetzner documents narrowing them with a bucket policy across two projects. Support for Hetzner is experimental until we have tested it end to end.

Steps

  1. Preferably create the credentials in a separate, empty Hetzner project (Security, S3 Credentials).

  2. On the backup bucket, add a bucket policy that allows that key only s3:ListBucket, as described in the Hetzner FAQ on S3 credentials.

  3. Copy the access key and secret; the secret cannot be shown again.

In the check form

Endpoint: 
https://<location>.your-objectstorage.com
Region: 
The location, for example fsn1, nbg1 or hel1.
  • If the connection test fails with HTTP 400, tell us: Hetzner may need a different URL style.

Provider documentation

Create a check