Storage Targets

Storage targets define where backup files are stored. jokowipe.id uses a Bring Your Own Storage (BYOS) model — backups are uploaded directly from the agent to your bucket.

Adding a Storage Target

1. Go to Storage Targets → Add New
2. Select your Storage Provider
3. Fill in the connection details
4. Click Test Connection to verify credentials
5. Click Save

Supported Providers

See Supported Storage Backends → for the full configuration reference.

Credential Security

Storage credentials you enter in the dashboard are:

• Encrypted with AES-256 before being stored
• Stored in HashiCorp Vault (not in the application database)
• Never logged or transmitted in plaintext
• Sent to the agent over mTLS-encrypted channels only when a backup is dispatched

Use Environment Variables in the Agent Config

If you configure storage credentials in the agent's local config file instead of the dashboard, use ${ENV_VAR} syntax to avoid hardcoding credentials.

Testing a Storage Target

After saving, click Test on any storage target to:

1. Verify the bucket exists and is accessible
2. Write a small test file (jokowipe-test-write)
3. Read it back
4. Delete it

A successful test confirms the agent can write backups to this target.

Storage Target Details

Each storage target shows:

Field	Description
Name	Friendly label
Provider	S3, GCS, Azure, etc.
Bucket/Container	The storage bucket name
Region	Cloud region
Prefix	Path prefix within the bucket
Total Backups	Number of backups stored here
Total Size	Aggregate size of all backups
Last Used	When the last backup was written
Status	Active / Warning / Error

Default Storage Target

Set one storage target as the default. New schedules and manual backups use the default target unless overridden.

Rotating Credentials

When you update storage credentials (e.g., rotating AWS access keys):

1. Add the new credentials to your storage target in the dashboard
2. Click Test Connection to verify
3. Save

The agent picks up the new credentials on its next heartbeat (within 60 seconds).

Rolling Credential Rotation

For zero-downtime key rotation, update the storage target credentials in jokowipe.id first, then revoke the old credentials from your cloud provider. This ensures no backup fails during the transition.

Viewing Storage Usage

Go to Storage Targets → [Target Name] → Usage to see:

• Storage used over time (chart)
• Backup count by day
• Largest backups
• Estimated monthly cost (for S3/GCS/R2)

Deleting a Storage Target

Backups Are Not Deleted Automatically

Deleting a storage target from jokowipe.id does NOT delete the backup files in your cloud bucket. You must delete them manually from your cloud console if desired.

A storage target cannot be deleted if it has active schedules referencing it. Remove or update those schedules first.