Docs Developers Sign in ← Site
Docs / Vault (S3 backup)

Back up a Synology NAS with Hyper Backup

Hyper Backup's S3 Storage destination works with any S3-compatible server. Point it at CloudBox Vault and your NAS keeps an encrypted, versioned off-site copy in the UK.

Applies to: DSM 7 (and DSM 6.2) with the Hyper Backup package. Labels may differ slightly between DSM versions; the fields are the same.

1 · Create a key and a bucket

In your CloudBox dashboardBackup: Create access key (copy the secret now — it is shown once) and Create bucket. Leave Object Lock off: Hyper Backup rotates old versions by deleting them, which Object Lock would prevent.

SettingValue
Endpoint / server addresshttps://s3.cloudbox.biz (some tools want just s3.cloudbox.biz)
Regionuk-1 — if the tool has no region field, leave it; the gateway accepts the default
SignatureVersion 4 (V4)
AddressingPath-style (s3.cloudbox.biz/bucket/key). Bucket-in-hostname addressing is not available yet.
Access key IDCBX… from the Backup tab → Create access key
Secret access keyshown once when the key is created
Bucketcreated in the Backup tab; lowercase letters, digits and hyphens, no dots
TLSYes — a normal public certificate, so leave certificate validation on

2 · Create the backup task

  1. Package Center → install Hyper Backup if it is not there, then open it.
  2. Click +Data backup task.
  3. Under the backup destination list choose S3 Storage.
  4. On the destination settings screen:
    • S3 Server: Custom Server URL
    • Server address: s3.cloudbox.biz
    • Signature Version: v4
    • Access Key / Secret Key: from the dashboard
    • Bucket name: pick the bucket you created from the list
    • Directory: a folder name for this NAS, e.g. ds1821-office
  5. Select the shared folders and applications to back up.
Heads upIf the bucket list stays empty, the key or secret is wrong, or the bucket does not exist yet. Hyper Backup never creates buckets — create it in the dashboard first.

3 · Encryption, schedule and rotation

  • Enable client-side encryption and set a strong password. Hyper Backup encrypts on the NAS before upload, so the backup is zero-knowledge. Export the encryption key and keep it, with the password, somewhere other than the NAS — without them the backup cannot be restored by anyone.
  • Compression: on. Schedule: nightly is typical. Integrity check: monthly.
  • Rotation: Smart Recycle or a fixed number of versions. Rotation is what frees space on Vault; there is no minimum storage duration, so a rotated version stops costing you immediately.
NoteIntegrity checks and restores read data back and count toward the monthly download allowance (3x what you store). A monthly check on a 1 TB backup is well inside it.

4 · Run it and check

Back up now. When the task reports Successful, the CloudBox Backup tab shows the bucket's usage within the hour. Do one test restore of a small folder (Hyper Backup → Restore) so you know the password and key work.

TipRestoring to a different NAS, or to a PC, uses Synology's free Hyper Backup Explorer with the exported key.

If something does not work

  • Connection test fails: check the server address has no https:// prefix if the field does not expect one, Signature Version is v4, and the NAS clock is right (Control Panel → Regional Options → Time → synchronise with an NTP server).
  • QuotaExceeded during backup: the plan is full — rotate more aggressively, or move up a plan.
  • More in Errors & limits.

Questions

Which Hyper Backup destination type do I choose?

S3 Storage, then Custom Server URL as the S3 server. Enter s3.cloudbox.biz as the server address, Signature Version v4, your access key and secret, and pick your bucket from the list.

The bucket list is empty.

The keys are wrong, or the bucket has not been created yet. Create the bucket in the CloudBox Backup tab first (Hyper Backup does not create buckets), then re-enter the key and secret.

Should I enable client-side encryption?

Yes. Hyper Backup encrypts on the NAS with a password you set and lets you export the key file. Keep both somewhere other than the NAS: without them the backup cannot be restored anywhere, including by CloudBox.

Does a Hyper Backup integrity check count as download?

Yes. Integrity checks read data back, which counts toward the monthly download allowance (3x what you store). A monthly check is fine; a daily full check on a large backup is not.

Can I use Object Lock with Hyper Backup?

No. Hyper Backup rotates old versions by deleting objects; Object Lock would block that. Leave Object Lock off for Hyper Backup buckets.