# Proxmox VE & PBS Setup Guide

Documentation on Proxmox services and setup guides as well as best practices and security configurations

# Proxmox Virtual Environment Setup

Complete Setup & Configuration Guide to setup Proxmox with prioritizing security

# Installation

This article walks through downloading the Proxmox VE ISO, creating a bootable USB drive, and installing Proxmox on your server hardware.

<span style="color: rgb(224, 62, 45);">Note</span>: Proxmox VE is a bare-metal installer. The entire target drive will be erased. Back up any important data before proceeding.

### Creating Bootable Drive

1. Download the Proxmox VE ISO
2. Visit the official Proxmox [download page](https://www.proxmox.com/en/downloads)
3. Select the latest Proxmox VE ISO Installer and download it to your computer.
4. Create a Bootable USB Drive Using [Rufus](https://rufus.ie) or [Etcher](https://etcher.balena.io)
5. Open Rufus, select your USB device, select the Proxmox ISO, and click Start
6. Accept any format warnings- all data on the USB will be erased

### First Boot and Install

1. Insert the USB into your Proxmox server and power it on
2. Enter BIOS/UEFI (usually F2, F12, DEL, or ESC at boot) and set USB as the first boot device
3. At the Proxmox boot menu, select: Install Proxmox VE (Graphical)  
    <span style="color: rgb(224, 62, 45);">Note</span>: If the graphical installer hangs or fails, try 'Install Proxmox VE (Terminal UI)' — it has better hardware compatibility.
4. Accept the End User License Agreement (EULA)
5. Select Target Hard Disk — click Options to choose the filesystem:  
     • ext4 (default) — simple, reliable, good for most setups  
     • ZFS — advanced, supports RAID, snapshots, data integrity checksums (requires more RAM)
6. Configure Location &amp; Time Zone — select your country, time zone, and keyboard layout
7. Set the Administrator Password — set a strong root password and enter an email address for alerts
8. Configure Network Settings:  
     • Select your network interface (NIC)  
     • Hostname: e.g., pve.localdomain  
     • IP Address: set a static IP (e.g., 192.168.1.100)  
     • Netmask: typically 255.255.255.0  
     • Gateway: your router's IP (e.g., 192.168.1.1)  
     • DNS Server: e.g., 8.8.8.8 or your router's IP
9. Review the summary and click Install
10. Once installation completes, remove the USB drive and click Reboot

### First Access via Web Browser

1. On another computer, open a web browser
2. Navigate to your Proxmox server's IP and port 8006:  
    [https://192.168.1.100:8006](https://192.168.1.100:8006)
3. Accept the self-signed SSL certificate warning in your browser
4. Log in with:  
     • Username: root  
     • Password: (the password you set during installation)  
     • Realm: Linux PAM standard authenticatio

<span style="color: rgb(224, 62, 45);">Note</span>: You will see a 'No valid subscription' popup — this is normal for the free/community version. Click OK to dismiss it.

# Web Console Tour & Preliminary Setup

This article covers the Proxmox web interface, the primary tool for managing your server, VMs, and containers. Also, best practices for first login.

### Post-Install Configuration (Highly Recommended)

Disable the Enterprise Repository (No Subscription)

1. In the web console, select your node (e.g., 'pve') in the left panel
2. Go to: Updates &gt; Repositories
3. Select the enterprise repository line (pve-enterprise) and click Disable
4. Click Add and select 'No-Subscription' repository
5. Update the System

```bash
apt update && apt dist-upgrade -y
```

6. Reboot after updating

```bash
reboot
```

### Navigating Web Interface

**Left Panel — Server View**  
 • Datacenter — top-level settings (cluster, permissions, storage, etc.)  
 • Your Node (e.g., 'pve') — the physical server  
 • Virtual Machines and Containers appear as children under the node

  
**Node Options (click your node)**  
 • Summary — CPU, memory, disk, and network stats  
 • Notes — add documentation/notes about your server  
 • Shell — opens a terminal session on the Proxmox host  
 • Updates — check and apply system updates  
 • Disks — view physical disks and manage LVM/ZFS  
 • Network — view and configure network interfaces and bridges  
 • DNS — configure DNS settings  
 • Time — configure time zone and NTP  
 • Syslog — view system logs  
 • Task History — see all past tasks and their results

  
**Datacenter Options**  
 • Summary — overall cluster status  
 • Storage — add and manage storage backends  
 • Backup — schedule automatic backups  
 • Replication — configure storage replication  
 • Permissions — manage users, roles, and access controls  
 • HA — high availability configuration  
 • Firewall — datacenter-level firewall rules

# Building a Virtual Machine & Templates

This article covers creating and configuring a full virtual machine in Proxmox. The example uses Ubuntu Server as the guest OS. Ubuntu Server is best lightweight option for running server as virtual machine. Unlike Ubuntu Desktop, this VM is accessed via command line, doesn't have GUI.

### Uploading ISO Image

1. In the web console, navigate to your node &gt; local storage &gt; ISO Images
2. Click Upload and upload a Linux ISO (e.g., Ubuntu Server), OR
3. Click Download from URL and paste a direct ISO link to have Proxmox download it directly

### Create Virtual Machine

1. Click the Create VM button in the top right corner
2. General tab:  
     • Node: select your node  
     • VM ID: auto-assigned (e.g., 100)  
     • Name: give it a descriptive name (e.g., ubuntu-server)
3. OS tab:  
     • Select the uploaded ISO from storage  
     • Guest OS Type: Linux; Version: 6.x - 2.6 Kernel
4. System tab:  
     • Machine: Default (i440fx) for Linux; q35 for Windows or PCIe passthrough  
     • BIOS: SeaBIOS (default) or OVMF (for UEFI)  
     • Enable Qemu Agent — check this box (we will install the agent later)
5. Disks tab:  
     • Bus/Device: VirtIO Block (virtio0) — best performance  
     • Storage: local-lvm (default)  
     • Disk Size: 32 GB minimum for Ubuntu Server  
     • Enable SSD emulation if using an SSD-backed storage
6. CPU tab:  
     • Sockets: 1  
     • Cores: 2 (or more depending on your server)  
     • Type: x86-64-v2-AIO or host (host gives best performance but reduces migration flexibility)
7. Memory tab:  
     • RAM: 2048 MB (2 GB) minimum for Ubuntu Server  
     • Enable Ballooning if you want dynamic memory allocation
8. Network tab:  
     • Bridge: vmbr0 (the default bridge connected to your physical NIC)  
     • Model: VirtIO (paravirtualized) — best network performance
9. Confirm tab — review settings and click Finish

### Start and Install the OS

1. Select your new VM in the left panel
2. Click Start, then click Console to open the display
3. Follow the OS installation wizard (Ubuntu Server example):  
     • Select language and keyboard layout  
     • Configure network (DHCP by default)  
     • Configure storage — use the entire disk  
     • Create your user account and set a password  
     • Install SSH server when prompted (important for remote access)  
     • Complete installation and reboot

### Virtual Machine Templates

Templates allow you to quickly clone new VMs without repeating the installation process.

<span style="color: rgb(224, 62, 45);">Note</span>: Converting a VM to a template is permanent. Clone it first if you want to keep the original running VM.

#### Preparing a VM for Template

1. Start with a fully installed and updated VM
2. Log into the VM and clean it up:

```bash
sudo apt clean
sudo apt autoremove -y
```

3. Clear machine-specific data (cloud-init or sysprep approach):

```bash
sudo apt install -y cloud-init
```

4. Clear the machine ID so each clone gets a unique one:

```bash
sudo truncate -s 0 /etc/machine-id
sudo rm /var/lib/dbus/machine-id
sudo ln -s /etc/machine-id /var/lib/dbus/machine-id
```

5. Shut down the VM:

```bash
sudo shutdown -h now
```

#### Converting to a Template

1. In the Proxmox web console, right-click the VM
2. Select Convert to Template
3. Confirm the VM icon changes to a template icon

#### Cloning from a Template

1. Right-click the template and select Clone
2. Choose:  
     • Mode: Full Clone (independent copy) or Linked Clone (shares template disk, faster but dependent)  
     • Name: give the new VM a name  
     • Target Storage: where to store the clone's disk
3. Click Clone Proxmox creates the new VM
4. Configure the clone (resize disk if needed, set static IP, etc.) before starting it

# Building Containers (LXC) & Templates

LXC containers are a lightweight alternative to full VMs. They are ideal for running Linux services with minimal overhead. However they are running as rootless, so there is little more risk to compromising hypervisor itself as it shares kernel, unlike VM. Best for internal only apps.

<span style="color: rgb(224, 62, 45);">Note</span>: Privileged containers run as root and have more hardware access. Unprivileged containers are more secure and recommended for most use cases.

### Download Container Template

1. In the web console, navigate to your node &gt; local storage &gt; CT Templates
2. Click Templates
3. Browse the template library, select a distro (e.g., Ubuntu 22.04), and click Download

### Create an LXC Container

1. Click Create CT in the top right corner
2. General tab:  
     • Node: your node  
     • CT ID: auto-assigned  
     • Hostname: e.g., ubuntu-ct  
     • Password: set the root password for the container  
     • SSH public key: optionally paste your public key for key-based access
3. Template tab: select the downloaded template
4. Disks tab:  
     • Storage: local-lvm  
     • Disk size: 8 GB is often sufficient for light services
5. CPU tab:  
     • Cores: 1–2 (containers share host CPU efficiently)
6. Memory tab:  
     • Memory: 512 MB – 1024 MB for most services  
     • Swap: 512 MB
7. Network tab:  
     • Bridge: vmbr0  
     • IPv4: DHCP or set a static IP/CIDR (e.g., 192.168.1.101/24)  
     • Gateway: your router IP
8. DNS tab: leave default or set your preferred DNS server
9. Confirm and click Finish

#### Start the Container

1. Select the container, click Start
2. Click Console to open a terminal session
3. Alternatively, SSH into the container using its IP address
4. Update the container:

```bash
apt update && apt upgrade -y
```

### Creating Container Template

Just like VM templates, you can convert a configured LXC container into a template for rapid reuse.

#### Preparing the Container

1. Configure your container as desired (install packages, set configs)
2. Clean up the container:

```bash
apt clean && apt autoremove -y
```

3. Shut down the container from the web console or:

```bash
poweroff
```

#### Converting to a Template

1. Right-click the container in the web console
2. Select Convert to Template and confirm

#### Cloning a Container Template

1. Right-click the template, select Clone
2. Set a name and target storage for the clone
3. Click Clone
4. Before starting the clone, update the hostname and network settings if needed

# User Management

Proxmox supports multiple users, roles, groups, and authentication realms. This is essential for any shared or production environment, as well as keeping access limited and secure.

Authentication Realms available in Proxmox

- **Linux PAM-** uses the host OS users (/etc/passwd). Root uses this realm
- **Proxmox VE** Authentication Server (PVE)- built-in Proxmox user database. Best for creating non-root admin accounts and GUI access
- **LDAP/Active Directory-** for enterprise integration

### Creating and Setting up New User

#### Create User

1. Go to Datacenter &gt; Permissions &gt; Users
2. Click Add
3. Fill in:  
     • User name: e.g., homelab-admin  
     • Realm: Proxmox VE Authentication Server  
     • Password: set a strong password  
     • Email, First/Last Name: optional
4. Click Add

#### Assigning Premissions

1. Go to Datacenter &gt; Permissions
2. Click Add &gt; User Permission
3. Set:  
     • Path: / (root, grants access to everything)  
     • User: the user you just created  
     • Role: Administrator (for full access) or PVEVMAdmin (for VM management only)
4. Click Add

#### Built In Roles

- Administrator — full control
- PVEVMAdmin — manage VMs (no host configuration)
- PVEVMUser — view and use VMs, no configuration
- PVEDatastoreAdmin — manage storage
- PVEAuditor — read-only access

  
<span style="color: rgb(224, 62, 45);">Note</span>: It is best practice to avoid using the root account for daily tasks. Create a named admin account for normal use.

# Backups & Snapshots

Protecting your VMs and containers with regular backups is essential. Proxmox includes built-in backup and snapshot tools. Also, it's good idea to connect Proxmox Backup Server if you have an option of running another server. This way backups are stored off site.

For configuring Proxmox Backup Server with Virtual Environment click [here](https://docs.cyberpaw.org/books/proxmox-ve-pbs-setup-guide/page/schedule-backup-job-with-pbs) for a guide

### Snapshots

Snapshots save the state of a VM or container at a point in time. They are fast but stored on the same storage as the VM — not a true backup.

1. Select a VM or container in the web console
2. Go to the **Snapshots** tab
3. Click **Take Snapshot**
4. Name the snapshot and add an optional description
5. Check 'Include RAM' if you want to capture the running memory state (only for VMs)
6. Click **Take Snapshot**
7. To store: select the snapshot and click **Rollback.**

  
<span style="color: rgb(224, 62, 45);">Note</span>: Snapshots use disk space and can impact VM performance over time. Do not rely on snapshots as your only backup strategy, rather as a quick reverse when you're working or configuring something on a VM.

### Manual Backups

1. Select a VM or container
2. Go to the **Backup** tab
3. Click **Backup Now**
4. Select **storage** (e.g., local), backup mode, and compression
5. Click **Backup-**  Proxmox creates a compressed backup archive

<span style="color: rgb(224, 62, 45);">Note</span>: If you have PBS connected to your Proxmox system, you can change the Storage from Local to PBS.

### Scheduled Backups

1. Go to Datacenter &gt; Backup
2. Click Add
3. Configure:  
     • **Node:** your node or all  
     • **Storage:** where to save backups  
     • **Schedule:** e.g., daily at 2:00 AM  
     • **Selection:** All VMs, specific IDs, or exclude certain VMs  
     • **Retention:** set how many backups to keep (e.g., keep last 7)
4. Click **Create-** the schedule is saved and runs automatically

#### Backup Modes

- Stop — stops the VM, backs up, then restarts. Cleanest backup.
- Suspend — suspends the VM briefly during backup. Less downtime.
- Snapshot — VM keeps running. Fastest but may have slight consistency risk.

# Integrated Firewall

Proxmox includes a built-in firewall that can be configured at the Datacenter, Node, and VM/Container level.

#### Firewall Hierarchy

- **Datacenter** — rules that apply to all nodes in the cluster
- **Node** — rules specific to the Proxmox host itself
- **VM/Container** — rules specific to individual VMs/containers

#### Enabling the Firewall

1. Go to Datacenter &gt; Firewall &gt; Options
2. Set Firewall to Yes (Enabled)
3. Do the same for your node: Node &gt; Firewall &gt; Options
4. For a specific VM/Container: select it &gt; Firewall &gt; Options &gt; Enable

<span style="color: rgb(224, 62, 45);">Warning</span>: Always create rules to allow SSH (port 22) and the Proxmox web UI (port 8006) BEFORE enabling the firewall, or you may lock yourself out.

#### Creating Firewall Rules

1. Go to the relevant level (Datacenter, Node, or VM)
2. Go to **Firewall** &gt; **Add**
3. Configure the rule:  
     • Direction: in (incoming) or out (outgoing)  
     • Action: Accept, Drop, or Reject  
     • Protocol: TCP, UDP, ICMP, etc.  
     • Source / Destination IP: leave blank for any, or specify an IP range  
     • Dest. Port: e.g., 22 for SSH, 8006 for Proxmox UI, 80/443 for web  
     • Comment: add a description for the rule
4. Click **Add**

#### Security Groups

Security groups are reusable sets of firewall rules. Create a group once and apply it to multiple VMs.

1. Datacenter &gt; Firewall &gt; Security Group &gt; Create
2. Name the group (e.g., web-servers)
3. Add rules to the group
4. Apply the group to individual VMs in their firewall settings

# Networking

This article covers how to create additional network bridges and set up an isolated network for your virtual machines — separating VM traffic from the Proxmox management interface.

After installation, Proxmox creates one Linux bridge:

- **vmbr0** — connected to your physical NIC (eth0/enp3s0), carries management and VM traffic

#### Creating a New Bridge for VM Traffic

1. In the web console, go to your Node &gt; Network
2. Click Create &gt; Linux Bridge
3. Configure:  
     • Name: vmbr1 (or any available name)  
     • IP Address / CIDR: leave blank for a pure internal bridge (no host routing), OR assign an IP if you want the host to route between networks  
     • Bridge ports: leave blank for internal-only, or enter a NIC name to connect to physical network
4. Click Create, then click Apply Configuration
5. Reboot may be needed for changes to take full effect

#### Assigning a VM to a New Bridge

1. Select the **VM** &gt; **Hardware** &gt; Select the **network device**
2. Click **Edit,** change the **Bridge** to **vmbr1**
3. Click **OK**
4. **Reboot** the VM

#### NAT and Routing

This step is Optional. To allow VMs on an internal bridge (vmbr1) to reach the internet through the Proxmox host, enable IP forwarding and NAT:

1. Enable IP forwarding:

```bash
echo 'net.ipv4.ip_forward=1' >> /etc/sysctl.conf
sysctl -p
```

2. Add NAT rule (replace 192.168.100.0/24 with your VM subnet):

```bash
iptables -t nat -A POSTROUTING -s 192.168.100.0/24 -o vmbr0 -j MASQUERADE
```

3. Make the rule persistent (install iptables-persistent):

```bash
apt install -y iptables-persistent
```

# Shared Storage

Shared storage allows multiple Proxmox nodes to access the same storage pool, enabling live migration of VMs and centralized backup storage. Also, if you have multiple devices clustered together, this can enable High Availability.

Storage Types in Proxmox

- **Directory** — local filesystem path (default: /var/lib/vz)
- **LVM** / **LVM-Thin** — local or shared block storage
- **ZFS** — local ZFS pools
- **NFS** — network file share (NAS integration)
- **CIFS/SMB** — Windows network share
- **Ceph** — distributed block storage (enterprise/advanced)
- **iSCSI** — block-level network storage

Managing Storage

- Content: each storage type can hold different content types (ISO, backups, VM disks, etc.)
- Shared storage is available to all nodes in a cluster
- Local storage (local, local-lvm) is only available on the local node

#### Adding NFS Storage

1. On your NAS, create an NFS share and note its IP and export path
2. In Proxmox web console, go to **Datacenter** &gt; **Storage** &gt; **Add** &gt; **NFS**
3. Configure:  
     • ID: give it a name (e.g., nas-storage)  
     • Server: IP address of your NAS  
     • Export: the NFS export path (e.g., /mnt/pool/proxmox)  
     • Content: select what to store here (Disk image, ISO image, VZDump backup file, Container template)
4. Click **Add,** the NFS share appears in the left panel under all nodes

#### Adding CIFS/SMB Storage

1. Go to **Datacenter** &gt; **Storage** &gt; **Add** &gt; **SMB/CIFS**
2. Enter **Server IP, Share name, Username,** and **Password**
3. Select **Content types** and click **Add**

# Clustering

A Proxmox cluster groups multiple Proxmox nodes together, enabling centralized management, live migration (moving VMs between nodes), and high availability. When second node is connected to a cluster, it will assume primary cluster roles and authentication.

Pre Requisites:

- All nodes must be running the same or compatible version of Proxmox VE
- All nodes must be able to communicate over the network (low latency preferred)
- Odd number of nodes recommended (3+) for quorum
- Shared storage is recommended (but not required for basic clustering) for High Availability

<span style="color: rgb(224, 62, 45);">Note</span>: Creating a cluster on an existing node will reset some configurations. Set up clustering before deploying production VMs.

#### Creating the Cluster on Primary Node

1. On the primary node, go to **Datacenter** &gt; **Cluster**
2. Click **Create Cluster**
3. Enter a **Cluster Name** (e.g., homelab-cluster)
4. Set the **Cluster Network** (the network ring used for cluster communication)
5. Click **Create**
6. Click **Join Information** and copy the join token

#### Adding Additional Nodes

1. Log into the second Proxmox node's web console
2. Go to **Datacenter** &gt; **Cluster**
3. Click **Join Cluster**
4. Paste the join information from the first node
5. Enter the root password of the first node when prompted
6. Click **Join** — the node joins the cluster

Afterr joining, all nodes appear in the left panel of any node's web console. You can manage all VMs and containers across all nodes from a single interface.

#### Live Migration

1. Right-click a VM on any node
2. Select Migrate
3. Choose the target node
4. Click Migrate — the VM moves to the other node (live, with minimal interruption if using shared storage)

# High Availability

High Availability (HA) ensures that critical VMs are automatically restarted on another node if the node they are running on fails.

Prerequisites:

- A working cluster with at least 3 nodes
- Shared storage accessible by all nodes (so the VM disk can be accessed after failover)
- The HA manager service must be running on all nodes

<span style="color: rgb(224, 62, 45);">Note</span>: HA requires a quorum (majority of nodes must be online). With 3 nodes, you can tolerate 1 node failure. With 2 nodes, there is no quorum and HA will not function.

#### Enabling HA for a VM

1. Go to Datacenter &gt; HA
2. Click Add under Resources
3. Select the VM ID you want to protect
4. Set the HA State:  
     • Started — HA will always try to keep this VM running  
     • Stopped — HA will manage the VM but leave it stopped  
     • Disabled — HA does not manage this VM
5. Set Max Restart — how many times to try restarting on the same node before migrating
6. Set Max Relocate — how many nodes to try before giving up
7. Click Add

#### HA Groups

HA groups define which nodes are preferred or required for specific VMs.

1. Datacenter &gt; HA &gt; Groups &gt; Add
2. Name the group and select nodes
3. Set priority (higher = preferred) for each node
4. Assign a VM to the group in HA Resources

#### Testing High Availability

1. Start an HA-protected VM on one node
2. Simulate a node failure by powering off that node or running:

```bash
systemctl stop pve-cluster corosync
```

Watch the Proxmox web console — the VM should automatically start on another node

# Proxmox Troubleshooting and Commands

- Update Proxmox

```bash
apt update && apt dist-upgrade -y
```

- List all VMs

```bash
qm list
```

- List all containers

```bash
pct list
```

- Check storage

```bash
pvesm status
```

- Check cluster status

```bash
pvecm status
```

- Check HA status

```bash
ha-manager status
```

- View running services

```bash
systemctl list-units --type=service --state=running
```

- View system logs

```bash
journalctl -f
```

- Proxmox Service Management

```bash
systemctl restart pveproxy        # restart web interface
systemctl restart pvedaemon       # restart main daemon
systemctl restart pvestatd        # restart stats daemon
systemctl status corosync         # check cluster communication
systemctl status pve-ha-lrm       # check HA Local Resource Manager
```

# Connecting Server Directory to Synology NAS (NFS Setup)

This is a step-by-step document on how to connect a server directory to a Synology NAS using NFS. This guide assumes you have access to both the server and the Synology NAS.

##### Prerequisites

 Access to a server (Linux-based).  
 Access to a Synology NAS.  
 NFS service enabled on the Synology NAS.  
 Sufficient permissions to execute commands on both devices.

#### Configure NFS on Synology NAS

1. Access Synology NAS
2. Enable NFS Service by Going to **Control Panel &gt; File Services**
3. Under the NFS tab, enable the NFS service
4. Configure NFS Permissions: 
    1. Navigate to Shared Folder in Control Panel
    2. Select the folder you want to share (e.g., /volume1/paperless-documents)
    3. Click on Edit &gt; NFS Permissions
    4. Click Create and set the following: 
        1. Hostname or IP: Enter the IP address of your server
        2. Privilege: Set to Read/Write
        3. Squash: Select No mapping to allow direct access
        4. Asynchronous: Optional, you can enable this for better performance
        5. Cross-Mount: Enable if you intend to mount cross-shared folders
        6. Check Allow users to access mounted subfolders
5. Click **OK** to save the settings

![Screenshot From 2026-01-25 16-57-01.png](https://docs.cyberpaw.org/uploads/images/gallery/2026-01/scaled-1680-/screenshot-from-2026-01-25-16-57-01.png)

#### Prepare Your Server

1. SSH into your server
2. Install NFS Client

```bash
sudo apt-get update
sudo apt-get install nfs-common
```

3. Create mount point- a directory where the NFS share will be mounted

```bash
sudo mkdir -p /mnt/nas/Import
```

# Installation and Configuration Guides for Proxmox Backup Server

Initial Setup Guides for Proxmox Backup Server

# Installing Proxmox Backup Server

This article goes over steps for installing Proxmox Backup Server. There is multiple options on where to run PBS instance, however for best performance running it on seperate bare metal machine would be the best option. PBS can run in virtual machine if needed, just like any other OS with ISO image. If PBS runs in vm do not select that vm when scheduling backup job with PBS.

Prerequisite is machine ready and Proxmox Backup Server ISO flashed to flash drive

#### Installing PBS

1. Boot the machine and select flash drive with ISO image
2. Install PBS with a graphical user interface

![image.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/scaled-1680-/IRMimage.png)

3. **Accept** EULA
4. Select Target Disk to where OS will live (Hopefully separate from main storage if you have couple)
5. Fill in your country, timezone and keyboard layout
6. Choose a unique password and fill in your email address for your **root** access (you can disable root later)
7. Fill in your network details
    
    
    1. ID: A name for the connection, e.g., pbs-backup
    2. **Managment** Interface: unless you want/have a different interface, leave this as default
    3. **Hostname:** "NameOfYourPBS":local
    4. **IP Address:** Choose a static IP address
    5. **Gateway:** Fill in the gateway
    6. **DNS server:** Fill in a DNS server
8. Finish the installation by clicking continue
9. Access the PBS Dashboard by going to its \[IP Address\] and pot 8007 eg. https://192.168.1.101:8007

# Configuring Updates for Proxmox Backup Server

This article goes over setting up Community based updates. By default, PBS (and Proxmox VE), are configured to download the 'Enterprise' repository for your updates. Unless you do have an enterprise license, we need to add the 'no-subscription' repository and disable the enterprise repository.

1. Login to PBS
2. Go to **Administration, Repositories** and click **Add**

![image.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/scaled-1680-/XVsimage.png)

3. Select the **'no-subscription'** repository and click **Add**
4. Select the **'pbs-enterprise'** repository and click **'disable'**

![image.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/scaled-1680-/Cbuimage.png)

Go to 'administration', 'Updates', and click 'refresh'. This will will check the repository for updates. Afterwards click on 'update' or run update from the ssh or shell

```bash
sudo apt update && sudo apt upgrade -y
```

# Configuring Datastore

Datastore is where the backups will be saved. This article goes over configuring datastore using a disk on the machine. If not using volume from machine check out this article to [use NAS storage via NFS](https://docs.cyberpaw.org/books/installation-guides-for-software-and-services/page/set-up-proxmox-backup-server-with-nfs-storage)

#### Creating Datastore

1. Login to PBS
2. Under **Storage/Disks** got to **Directory**

![Screenshot from 2025-12-01 13-35-13.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/scaled-1680-/screenshot-from-2025-12-01-13-35-13.png)

3. Click **Create: Directory**
    1. Select the disk
    2. Choose Filesystem (I chose ext4)
    3. Give datastore a name
    4. Make sure **Add as Datastore** is selected
    5. Click **Create**

#### Setting up Datastore in Proxmox Backup Server

1. Under **Datastore** click **Create Datastore**
    1. Name: Choose name to call it
    2. Backup Path: Select the path to folder directory on the machine.
    3. Under Prune option this is personal preference, but deduplication really lowers the amount of space needed, so keeping more backups is not bad decision.
2. Once done click **Add**

![image.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/scaled-1680-/G92image.png)

When the datastore is added, clicking on datastore will give you info, and also ability to adjust Prune and CG Jobs. Also, under Verify Jobs it's good idea to add Verify Job for checking that backup isn't corrupted and that will work when needed.

3. Under **Prune &amp; CG Jobs** make sure CG Job is set to daily. You can adjust Prune job here as well
4. Under **Verify Job** click **Add** and schedule Verify to run Daily and Re-Verify to run every 30 days

It is optional to create a namespace. Storing your backups in separate namespaces is very useful if you ever plan on planning to use your PBS to store backups from multiple Proxmox hosts, or even other Linux server.

5. Under **Content** click **Add Namespace**
    
    
    1. **Parent Namespace:** This would be folder in which this subfolder will live, usually root
    2. **Namespace Name:** name of the folder where backups will live

# Security Configuration

It is optional but recommended to create a separate backup user. In the next step we will connect our PBS to Proxmox VE, and for that you need a user. You could simply use the root user, but best practices dictate that a separate user is better for security reasons. Also, Add Two Factor Authentication to secure your root account.

Note: a user that has Two Factor Authentication, can't be used to connect your PBS to Proxmox VE. That is also why we created a separate backup user in the previous step.

#### Adding Backup User

1. Login to PBS
2. Under **Configuration** go to **Access Control** and click **Add**
3. In **new user** window 
    1. Give it a name
    2. Realm: Proxmox Backup authenticator
    3. Choose strong password
    4. Make sure Enabled is checked and it doesn't expire

![Screenshot from 2025-12-01 14-14-10.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/scaled-1680-/screenshot-from-2025-12-01-14-14-10.png)

1. Now that the account has been created, we also need to give it the correct permissions.
2. Go the **Permissions** tab
3. Click **Add** and select **User Permission**

![Screenshot from 2025-12-01 14-22-21.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/scaled-1680-/screenshot-from-2025-12-01-14-22-21.png)

1. In User Premission Window 
    1. **Path:** select datastore only
    2. **User:** choose backup user you created
    3. **Role:** Choose DatastoreAdmin
    4. **Make** sure Propagate is selected
2. Click **Add**

![image.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/scaled-1680-/zr7image.png)

#### Enabling Two Factor Authentication

1. Go to **Access Control**
2. Select **Two Factor Authentication** and click **Add**
3. Select **TOTP** and Fill the required details using your preferred password manager

You have to do this for each user

# Backups Setup

# Set Up Proxmox Backup Server with NFS Storage

Proxmox Backup Server PBS is design to backup Proxmox Virtual Environment. Proxmox Backup Server is designed to run bare-metal on dedicated hardware, with dedicated drives for the operating system and backups. The main backup should be on bare metal and NFS Storage as additional job for redundancy. This article assumes that PBS is already set up and functional, and using Synology.

Note:

- When you configure a datastore in Proxmox Backup Server, it creates one hidden folder (.chunks) and one hidden file (.lock). These files must be created by the backup user (UID:34 / GID:34).
- This is the ultimate problem with using shared storage – most users don’t have a user and group named backup with the UID/GID of 34. This is a problem, because you’ll immediately run into permission issues attempting to create the two folders above.
- To get around this, you can change the ownership (chown backup:backup \[mounted\_folder\]) to ensure the backup user and group own the folder….if your NAS allows it.

##### Setting up Shared Folder and Permissions on NAS

1. Login to **Synology DSM**
2. Open **Control Panel** and under **Shared Folder** click **Create**
    1. Add **IP** of PBS server
    2. Set Privilege to **Read/Write**
    3. Make sure Squash is set to **Map all users to admin** - in order for this to work

![Screenshot From 2025-11-30 18-18-02.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-11/scaled-1680-/screenshot-from-2025-11-30-18-18-02.png)

Make sure to add Firewall rule on Synology NAS to allow PBS IP to NFS application, as well as set Firewall rule on Unifi router to allow traffic from PBS to NAS.

##### Create Directory on PBS and connect to NAS via NFS

1. Log in to PBS and access shell or access PBS via ssh
2. Make two directories in the PBS shell – one will be mapped temporarily, and the other will be used for creating the datastore.

```bash
mkdir /mnt/pbs-backups
mkdir /mnt/temp
```

2. Change the ownership of the folder to the backup user and group. The system should do this automatically, but I like to do it regardless.

```bash
chown backup:backup /mnt/pbs-backups
```

3. **Add** the permissions on your NAS for NFS to the IP address of your PBS server. Steps Above
4. Update the **fstab** file so that the directory mounts automatically at boot to the NAS. This is done temporarily so that we can move the files from the local directory to the NAS.

```bash
nano /etc/fstab
```

5. **Add** the information below to the file to enable NFS connection, then **save** it

```bash
[IP_ADDRESS]:[LOCATION/FOLDER_ON_NAS] /mnt/temp nfs defaults 0 0
```

6. Mount the directory

```bash
mount -a
```

7. **Add** a **Datastore** in PBS. Select Add Datastore, then give it a name, and add the backing path below. Remember, this will temporarily write the data locally, which we’ll then move to the NAS.

```bash
/mnt/pbs-backups
```

![image.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-11/scaled-1680-/image.png)

GC and Prune schedule can be set at later time. Or schedule them here

![image.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-11/scaled-1680-/kuUimage.png)

8. Back on Shell. **Move** the **data** to the temp folder, which is technically mounted to the NAS. This might take a little while depending on your network speeds.

```bash
cp -R /mnt/pbs-backups/.chunks /mnt/pbs-backups/.lock /mnt/temp
```

9. Now that the data has been written to the NAS, we can mount the folder on the NAS to the pbs-backups directory.

```bash
[IP_ADDRESS]:[LOCATION/FOLDER_ON_NAS] /mnt/pbs-backups nfs defaults 0 0
```

10. Run the commands below to mount the directory to the new folder.

```bash
mount-a
systemctl daemon-reload
```

11. Reboot Proxmox Backup Server and see if the datastore is functional. You should be able to navigate the datastore, see the available storage, and create a prune schedule.

Connecting NFS storage from NAS to PBS is complete. Next step is to create [Backup Job with PBS on Proxmox Virtual Environment server.](https://docs.cyberpaw.org/books/proxmox-ve-pbs-setup-guide/page/schedule-backup-job-with-pbs)

# Schedule Backup Job with PBS

This guide goes over scheduling backup job with PBS server. Proxmox Virtual Environment can run it's own jobs, but for best optimization, using deducation and verify jobs, having PBS is good idea. Also, it provides redundancy if pve goes down.

Using Proxmox Backup Server (PBS) over Proxmox VE (PVE) native backups offers several significant advantages, particularly for environments requiring efficient, secure, and reliable backup management. The primary benefit is that PBS performs incremental backups, transferring only changed data since the last backup, which drastically reduces backup time and network bandwidth usage compared to PVE’s full backup approach that copies entire VM or container images each time. This incremental method, combined with advanced deduplication, ensures that duplicate data across multiple VMs or containers is stored only once, leading to substantial space savings and allowing for more frequent backups without excessive storage consumption.

#### Setting up Datastore in Proxmox Backup Server

1. Login to PBS
2. Under **Datastore** click **Create Datastore**
    1. Name: Choose name to call it
    2. Backup Path: Select the path to folder directory on the machine. If not using volume from machine check out this article to [use NAS storage via NFS](https://docs.cyberpaw.org/books/installation-guides-for-software-and-services/page/set-up-proxmox-backup-server-with-nfs-storage)
    3. Under Prune option this is personal preference, but deduplication really lowers the amount of space needed, so keeping more backups is not bad decision.
3. Once done click **Add**

![image.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/scaled-1680-/G92image.png)

When the datastore is added, clicking on datastore will give you info, and also ability to adjust Prune and CG Jobs. Also, under Verify Jobs it's good idea to add Verify Job for checking that backup isn't corrupted and that will work when needed.

4. Under **Prune &amp; CG Jobs** make sure CG Job is set to daily. You can adjust Prune job here as well
5. Under **Verify Job** click **Add** and schedule Verify to run Daily and Re-Verify to run every 30 days

It is optional to create a namespace. Storing your backups in separate namespaces is very useful if you ever plan on planning to use your PBS to store backups from multiple Proxmox hosts, or even other Linux server.

5. Under **Content** click **Add Namespace**
    
    
    1. **Parent Namespace:** This would be folder in which this subfolder will live, usually root
    2. **Namespace Name:** name of the folder where backups will live

#### Adding PBS Database on PVE instance

1. Select Datacenter &gt; Storage &gt; Add &gt; Proxmox Backup Server
2. Set the parameters to match the information below: 
    1. ID: the name you’d like to use (I use pbs-backups)
    2. Server: IP address of Proxmox Backup Server
    3. Username: bservice@pbs (use user made specifically for pbs to pve connection).
    4. Password: Password of the user
    5. Datastore: Name of the datastore you created in PBS
    6. Namespace: if you have namespace add it here
    7. Fingerprint: hash from PBS server. Paste the fingerprint copied from the PBS dashboard
    8. **Add** Database

![image.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/scaled-1680-/Fa0image.png)

![image.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-11/scaled-1680-/6zCimage.png)

#### Add a Backup Job in PVE

1. Login back to Proxmox Virtual Environment
2. Select **Datacenter** then **Backup,** then select **Add**
    1. Under **General**
        1. Select PBS Storage
        2. Schedule put a time that works best
        3. Selection Mode: best to do All
        4. Mode: Stapshot is the most reliable for daily backup. Stop can be run once a week
    2. Retention 
        1. This is configured on PBS side
3. Click **OK** to schedule the backup

![image.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/scaled-1680-/kdjimage.png)

# Backing up Proxmox Virtual Environment to Synology NAS

This article goes trough setting up NFS connection between Synology and PVE Database. Although using Proxmox Backup Server is better for keeping more backups using deduplication, verification and pruning options, having additional backup job directly from PVE instance can increase redundancy in case of PBS failure.

Having Proxmox Virtual Environment and Synology NAS up and running are pre requisite for this setup.

#### Setting up NFS connection on Synology

1. Open the **Control Panel** on Synology **DSM** and select **File Services** then **NFS**
2. Select **Enable NFS service** and then **Apply.** (NFSv3 is still a safe, but selecting latest protocol is always a good idea)

![image.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/scaled-1680-/rG9image.png)

3. Select **Shared Folder** in Control Panel, then **Create** new or **Edit** the folder where you’d like your Proxmox data to be stored
4. Select **NFS Permissions**
    1. **IP:** put the IP address of Proxmox machine
    2. **Privilege:** Leave it Read/Write so pve can access backups when needed
    3. **Squash:** Set to No Mapping
    4. Select A**llow users to access mounted subfolders**
5. Click **Save**

![image.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/scaled-1680-/KdJimage.png)

Make sure Synology Firewall is configured to allow Proxmox IP address to access Synology via NFS. Also, on Unifi router settings ensure that there is a rule set to allow access.

#### Proxmox Storage Configuration

1. Login to Proxmox Virtual Environment
2. Select **Datacenter** then **Storage**
3. Select **Add** then **NFS**

![Screenshot from 2025-12-01 10-20-05.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/scaled-1680-/screenshot-from-2025-12-01-10-20-05.png)

4. At the **NFS** screen 
    1. Create an **ID**
    2. **IP** Address of your Synology NAS server
    3. In the **Export** drop-down menu, the location of your Proxmox folder should automatically appear (If not, there is problem with Synology Firewall or Router Firewall)
    4. In the Content drop-down, select **ALL** entries. You can then select **Add**

![Screenshot from 2025-12-01 10-22-05.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/scaled-1680-/screenshot-from-2025-12-01-10-22-05.png)

Proxmox should now show the Synology NAS Storage that we created above

#### Setting up Backup Job

We can now backup individual machines or create a backup job

1. Under Datacenter go to **Backups**
2. Select **Add** button
3. In Backup Job window under **General**
    1. Keep Node to All
    2. Storage: Select NFS storage we configured
    3. Schedule: Pick date that works best for you
    4. Selection Mode: Either select all or manually choose which VMs and LXCs to run backup for
    5. Mode: Snapshot for daily backup, Suspend or Stop for weekly (make sure that your applications are set to automatically start at reboot)

[![Screenshot from 2025-12-01 10-23-24.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/scaled-1680-/screenshot-from-2025-12-01-10-23-24.png)](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/screenshot-from-2025-12-01-10-23-24.png)

4. In Backup Job window under **Retention**
    1. Set retention that best works for you, depending on the storage size allocated

[![Screenshot from 2025-12-01 10-28-40.png](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/scaled-1680-/screenshot-from-2025-12-01-10-28-40.png)](https://docs.cyberpaw.org/uploads/images/gallery/2025-12/screenshot-from-2025-12-01-10-28-40.png)

# How to install Proxmox Backup Client

This guide explains how to install and use Proxmox Backup Client on a Debian VM. This would allow non proxmox machine to be backed up using PBS.

[Proxmox Backup Client Documentation](https://othersidetech.com/ProxmoxBackupServer/proxmox-backup-client/)

[Proxmox Installaton for Proxmox Backup Client Documentation](https://pbs.proxmox.com/docs/installation.html#install-proxmox-backup-client-on-debian)

#### Installing Proxmox Backup Client

1. Add the repository
2. In order to configure this repository you need to first setup the Proxmox release key

Please note that this installation is for Debian 12 (Bookworm). If you are on a newer version, use this guide a reference with the updated command on: https://pbs.proxmox.com/docs/installation.html#package-repositories-client-only-apt

```bash
sudo wget https://enterprise.proxmox.com/debian/proxmox-release-bookworm.gpg -O /etc/apt/trusted.gpg.d/proxmox-release-bookworm.gpg
```

```bash
sudo nano /etc/apt/sources.list.d/pbs-client.list
```

3. add the line

```bash
deb http://download.proxmox.com/debian/pbs-client bookworm main
```

4. Install Proxmox Backup Client

```bash
sudo apt update
```

```bash
sudo apt install proxmox-backup-client
```

```bash
proxmox-backup-client version
```

#### Configure Proxmox Backup Client

##### First backup

```bash
sudo proxmox-backup-client backup "backupname".pxar:"directory" --repository "backupuser"@pbs@"PBS-IP":"DataStoreName" -ns "YourNameSpace"
```

Example:

```bash
sudo proxmox-backup-client backup mkdocsbackup.pxar:/home/user/docker --repository ardougneBackupUser@pbs@100.102.226.112:HDD-storage-5Tb -ns azure_mkdocs
```

##### List all backups

```bash
proxmox-backup-client list --repository "backupuser"@pbs@"PBS-IP":"DataStoreName" -ns "YourNameSpace"
```

example:

```bash
proxmox-backup-client list --repository ardougneBackupUser@pbs@100.102.236.112:HDD-storage-5Tb -ns azure_mkdocs
```

##### Backup encryption

```bash
proxmox-backup-client key create /home/user/encryption.key
```

Fill in your desired key

#### Storing credentials

This is so that you do not need to enter credentials for each backups.

- **Environment variables:** is an option, but credentials are stored in plain text.
- **Systemd credentials:** are stored as encrypted files that only systemd decrypts when launching a service. We will be using systmd credentials for this guide.

To store the password of the backup user:

```bash
sudo systemd-ask-password -n | systemd-creds encrypt --name=proxmox-backup-client.password - /your/password/directory/password.cred
```

To store the encryption key we created:

```bash
systemd-ask-password -n | sudo systemd-creds encrypt --name=proxmox-backup-client.encryption-password - /home/user/encryption-password.cred
```

Let's create a systemd service:

```bash
sudo nano /etc/systemd/system/backup.service
```

Paste in the following (fill in your own details and remove the quotes):

```bash
[Unit]
Description=Proxmox Backup Client service
Wants=network-online.target
After=network-online.target

[Service]
Type=oneshot
ExecStart=proxmox-backup-client backup "backupname".pxar:/home/user/docker \
  --repository "backupuser"@pbs@"PBS-IP":"DataStoreName" \
  -ns "YourNameSpace" \
  --keyfile /home/user/encryption.key
LoadCredentialEncrypted=proxmox-backup-client.password:/home/user/password.cred
LoadCredentialEncrypted=proxmox-backup-client.encryption-password:/home/user/encryption-password.cred

[Install]
WantedBy=multi-user.target
```

Reload systemd so it picks up the service

```bash
sudo systemctl daemon-reload
```

Test it:

```bash
sudo systemctl start backup.service
```


#### Schedule a backup

To start a backup at a certain time

```bash
sudo nano /etc/systemd/system/backup.timer
```

```
[Unit]
Description=Run backup daily at 2am

[Timer]
OnCalendar=*-*-* 02:00:00
Persistent=true

[Install]
WantedBy=timers.target
```

```bash
sudo systemctl daemon-reload
```

```bash
sudo systemctl enable --now mkdocs-backup.timer
```


#### Restore a backup

First list all your backups:

```bash
sudo proxmox-backup-client snapshot list "backupname".pxar:"directory" --repository "backupuser"@pbs@"PBS-IP":"DataStoreName" -ns "YourNameSpace"
```

To restore a backup:

```bash
proxmox-backup-client restore host/"YourHostname"/2025-08-09T15:51:02Z "backupname".pxar /where/to/restore --repository "backupuser"@pbs@"PBS-IP":"DataStoreName" -ns "YourNameSpace"
```