Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

A Coolify instance backup protects Coolify’s control-plane database: projects, resources, settings, saved credentials, and deployment history. It does not back up application files, workload database contents, Docker volumes, or storage mounted on connected servers. To make a recovery usable, keep the database dump and the exact APP_KEY from /data/coolify/source/.env, then protect workload data with separate, engine-aware backups.

The safest design keeps at least one copy away from the Coolify host, uses an S3-compatible destination when practical, retains an independently stored local or offline copy, and periodically proves that a restore works on a disposable target.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What a Coolify instance backup contains

Coolify’s instance backup is a dump of its own PostgreSQL control-plane database. Restoring it brings back the information Coolify uses to describe and manage deployments:

  • Projects and resources
  • Instance settings
  • Saved credentials and other encrypted configuration
  • Deployment history

The dump is not a complete server image. It does not contain the data produced by the applications Coolify deploys, nor the files and storage those applications use.

#1 Best Overall
Sale
Western Digital 8TB My Book Desktop External Hard Drive, USB 3.0, External HDD with Password Protection and Backup Software - WDBBGB0080HBK-NESN
  • Massive capacity, up to 22TB capacity. (1TB = one trillion bytes. Actual user capacity may be less depending on operating environment.).Specific uses: Personal
  • Includes software for device management and backup with password protection (Download and installation required. Terms and conditions apply. User account registration may be required.)
  • 256-bit AES hardware encryption
  • SuperSpeed USB (5 Gbps); USB 2.0 compatible
  • Trusted storage built with WD reliability
Data In the Coolify instance dump? Required protection
Projects, resources, settings, credentials, deployment history Yes Coolify’s instance backup and its restore procedure
Application source files and uploaded files No Back up the source repository and application file locations separately
PostgreSQL, MySQL, MariaDB, MongoDB, ClickHouse, or SQLite workload data No Use Coolify’s engine-aware database backup features
Redis, Dragonfly, or KeyDB data No Use that service’s persistence and backup tools
Docker volumes and directory mounts No Configure storage backups and test a file-level restore
External storage on connected servers No Back up the external system independently

This separation matters during a server move. A successful Coolify restore can recreate the control plane while an application still has no database rows, uploaded media, or persistent volume contents until those separate backups are restored.

The encryption key you must save separately

Save the complete line beginning with APP_KEY= from /data/coolify/source/.env. Store it in a password manager or another encrypted location that is not dependent on the Coolify server.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The database dump does not contain this key. Coolify uses the key to read encrypted credentials; without the matching value, a restored database can be present while its secrets remain unreadable. Preserve the line exactly, including its prefix and value, and restrict access to the people who can perform recovery.

Design a backup that survives a host failure

A backup job reporting success only proves that a file was created or uploaded at that time. It does not prove that the file can be downloaded, decrypted with the intended key, or restored into a working Coolify installation.

Use at least two failure domains:

  • Coolify storage: Keep the configured local copy long enough to recover from an operator mistake.
  • Separate storage: Send a copy to S3-compatible object storage or another server so a lost host does not also destroy the backup.
  • Offline or portable copy: Periodically download a .dmp file and recovery records to a portable external SSD or other offline medium.

Local and S3 retention limits are independent. A retention value of 0 means no limit. Choose limits for each location deliberately rather than assuming one setting controls both.

Back up a self-hosted Coolify instance

Run an immediate backup

  1. Sign in to the Coolify dashboard and open Settings > Backup.
  2. If backups are not configured, select the storage destination and configure the job first.
  3. Select Back up now.
  4. Wait for the execution result to show Success. Do not treat a queued or running job as a completed backup.
  5. Confirm that at least one storage location contains the resulting backup. Download a local copy, or retrieve a remote-only copy through the S3-compatible storage service.

Check that the downloaded file is non-empty before moving it to another system. Keep the filename, creation time, Coolify version, and the location of the matching APP_KEY in your recovery record.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Save the key and recovery notes

Copy the entire APP_KEY=... line from the server’s /data/coolify/source/.env into your password manager. Do not place the key in the same unencrypted folder as a publicly accessible dump. Record which Coolify instance and approximate software version produced the dump, because the version can affect the installer and migration step during recovery.

Rank #2
Seagate One Touch 24TB External Hard Drive Desktop HDD - USB-C Compatible with Most Windows and macOS, Rescue Recovery (STNB24000400)
  • No wall warts: Work freely with its bus-powered USB-C. No wall outlet required.
  • Big on space: High-capacity storage to store all your files in one place.
  • Reliable backup: Safeguard assignments, projects, or sensitive files with trusted performance.
  • Fuss-free, clutter-free: One port, one cord, quick connect.
  • Peace-of-mind: Comes with two-year limited warranty and Rescue Data Recovery Services.

Set a recurring schedule

In Settings > Backup, configure:

  • How often Coolify creates a dump
  • The execution timeout
  • How many local copies to retain
  • Whether to upload to S3-compatible storage and how many remote copies to retain

The documented timeout range is 60 to 36,000 seconds. Retention limits operate separately for local and remote destinations, and a value of 0 removes the limit for that destination. Set a timeout long enough for the database size and network speed, then monitor executions for repeated failures instead of silently increasing it.

Verify every destination

After the first scheduled run, verify both sides of the design:

  • The dashboard records Success.
  • A local file can be downloaded and opened as a non-empty dump.
  • The remote object exists and can be retrieved with the credentials used for recovery.
  • The corresponding APP_KEY is available outside the host.

If an upload fails, determine which copy remains and whether the next run will overwrite the only good local file. A schedule is not a substitute for checking the failure path.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What to back up outside the instance dump

Workload databases

Use Coolify’s engine-aware database backup capability for PostgreSQL, MySQL, MariaDB, MongoDB, ClickHouse, and SQLite workloads. Engine-aware backups account for how each database exports and imports data; copying a live database directory is not an equivalent method.

Redis, Dragonfly, and KeyDB require their own persistence or backup tools. Define retention, destination, and restore steps for each service rather than expecting the Coolify dump to contain its keys or data.

Volumes, mounts, and application files

Configure storage backups for Docker volumes and directory mounts. Keep at least one copy outside the deployment server and test restoring files into a clean location. Also protect source repositories, uploaded assets, certificates, and any external storage that an application uses. These items remain absent even when the Coolify dashboard and deployment history are restored perfectly.

Prepare before restoring

Gather all of the following before changing the target:

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
WD 2TB My Passport, Portable External Hard Drive, Black, backup software with defense against ransomware, and password protection, USB 3.1/USB 3.0 compatible - WDBYVG0020BBK-WESN
  • Slim durable design to help take your important files with you
  • Vast capacities up to 6TB[1] to store your photos, videos, music, important documents and more
  • Back up smarter with included device management software[2] with defense against ransomware
  • Help secure your important files with password protection and hardware encryption
  • 3-year limited warranty
  • The intended .dmp file
  • The matching APP_KEY line
  • SSH access to the target server
  • The Coolify version that created the dump, if known
  • Separate backups of workload databases, volumes, and files

For a replacement server, also preserve the SSH material Coolify uses to reach managed servers: /data/coolify/ssh/keys/ and ~/.ssh/authorized_keys, or independent backups of those files. Without the expected keys, the restored control plane may list servers that it can no longer authenticate to.

Confirm that the dump and key belong to the same intended instance. Restoring a valid dump with a key from another installation can leave encrypted credentials unusable.

Restore the Coolify database

1. Check the target database container

SSH to the target and confirm that the coolify-db container is running and healthy. Fix a stopped or unhealthy database before attempting an import; otherwise the restore can fail for reasons unrelated to the dump.

2. Copy and check the dump

Place the file on the target, for example at /data/backups/coolify-db-backup.dmp. Verify that the path is correct and that the file is non-empty:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
test -s /data/backups/coolify-db-backup.dmp && echo "dump is non-empty"

Use the exact file you selected during preparation, not merely the newest file in a directory.

3. Preserve the replacement server’s environment

On a new installation, retain the environment values generated for that server, including DB_PASSWORD. Replace only APP_KEY with the saved value from the original instance. Do not overwrite unrelated target settings unless the recovery plan specifically calls for it.

4. Run the destructive database restore

Run pg_restore against the Coolify database with the required safety and ownership flags:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
BUFFALO LinkStation 210 4TB 1-Bay NAS Network Attached Storage with HDD Hard Drives Included NAS Storage that Works as Home Cloud or Network Storage Device for Home
  • Value NAS with RAID for centralized storage and backup for all your devices. Check out the LS 700 for enhanced features, cloud capabilities, macOS 26, and up to 7x faster performance than the LS 200.
  • Connect the LinkStation to your router and enjoy shared network storage for your devices. The NAS is compatible with Windows and macOS*, and Buffalo's US-based support is on-hand 24/7 for installation walkthroughs. *Only for macOS 15 (Sequoia) and earlier. For macOS 26, check out our LS 700 series.
  • Subscription-Free Personal Cloud – Store, back up, and manage all your videos, music, and photos and access them anytime without paying any monthly fees.
  • Storage Purpose-Built for Data Security – A NAS designed to keep your data safe, the LS200 features a closed system to reduce vulnerabilities from 3rd party apps and SSL encryption for secure file transfers.
  • Back Up Multiple Computers & Devices – NAS Navigator management utility and PC backup software included. NAS Navigator 2 for macOS 15 and earlier. You can set up automated backups of data on your computers.
pg_restore --clean --if-exists --exit-on-error --no-acl --no-owner 
  --host="$DB_HOST" --port="$DB_PORT" 
  --username="$DB_USER" --dbname="$DB_NAME" 
  /data/backups/coolify-db-backup.dmp

Set DB_HOST, DB_PORT, DB_USER, and DB_NAME to the connection values for the target’s Coolify database, or use the connection method documented by that installation. The important restore flags are:

  • --clean drops database objects before recreating them.
  • --if-exists avoids errors when an object is not present.
  • --exit-on-error stops at the first restore error instead of continuing with an uncertain result.
  • --no-acl and --no-owner prevent the dump from trying to recreate source permissions and ownership on the target.

Because --clean removes current objects, this operation replaces the target Coolify database. Take a separate backup of anything currently on the target and recheck the dump and key before pressing Enter.

5. Restore SSH files when needed

Put the saved files back in their expected locations if the replacement server does not already contain them. Check permissions and ownership, then confirm that the keys correspond to the managed servers listed in Coolify.

6. Rerun the Coolify installer

Rerun the Coolify installer after the database import. If the original version is known, specify that version so migrations run against the release expected by the restored database. Once the installation is on the intended version, allow its normal startup and migration process to complete before testing deployments.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Verify the restore instead of trusting the import

Open the dashboard and check each recovery layer:

  1. The dashboard opens without an encryption error.
  2. Projects and resources appear with expected names and settings.
  3. Saved credentials can be used, proving that the matching APP_KEY is active.
  4. Localhost validation succeeds.
  5. Managed servers connect using the restored SSH material.
  6. Deployment history and instance settings are present.
  7. A controlled, low-risk deployment can reach its intended server.
  8. Workload databases, volumes, and application files are restored separately and contain expected data.

Do not call the process complete merely because pg_restore returned successfully. A backup is not a restore test until the dashboard, encryption, server connections, and representative application data have been checked.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Move Coolify to a new server

A server migration combines the database restore with an infrastructure change. Use this order to avoid confusing a control-plane problem with a missing workload backup:

  1. Create and verify a current Coolify instance dump on the old server.
  2. Save the matching APP_KEY outside the old server.
  3. Export workload databases and copy volumes, mounted directories, application files, and external storage using their separate backup procedures.
  4. Preserve /data/coolify/ssh/keys/ and ~/.ssh/authorized_keys, or make sure an independent copy exists.
  5. Install Coolify on the replacement server and note its generated environment values.
  6. Confirm that the replacement coolify-db is healthy.
  7. Copy the chosen .dmp to the replacement and verify it is non-empty.
  8. Keep the replacement server’s values such as DB_PASSWORD, substitute the original APP_KEY, and run the flagged pg_restore command.
  9. Restore SSH files, rerun the installer at the required version, and wait for migrations to finish.
  10. Validate the dashboard, credentials, localhost, managed servers, and deployment history.
  11. Restore workload databases and persistent files, then perform a controlled deployment and application-level check.

Only after those checks should you redirect normal traffic or retire the old host. Keeping the old server intact until validation gives you a recovery path if the selected dump, key, or workload copy is wrong.

Best Value
Sale
UGREEN NAS DH2300 2-Bay for Beginners & Personal Users, Phone Backup | AI Album, Private Cloud/Remote Access, File Sharing, Multi-Device Backup, Home Entertainment, 4GB RAM on Board (Diskless)
  • Entry-level NAS Personal Storage:UGREEN NAS DH2300 is your first and best NAS made easy. It is designed for beginners who want a simple, private way to store videos, photos and personal files, which is intuitive for users moving from cloud storage or external drives and move away from scattered date across devices. This entry-level NAS 2-bay perfect for personal entertainment, photo storage, and easy data backup (doesn't support Docker or virtual machines).
  • Set Your Devices Free, Expand Your Digital World: This unified storage hub supports massive capacity up to 64TB.*Storage drives not included. Stop Deleting, Start Storing. You can store 22 million 3MB images, or 2 million 30MB songs, or 43K 1.5GB movies or 67 million 1MB documents! UGREEN NAS is a better way to free up storage across all your devices such as phones, computers, tablets and also does automatic backups across devices regardless of the operating system—Window, iOS, Android or macOS.
  • The Smarter Long-term Way to Store: Unlike cloud storage with recurring monthly fees, a UGREEN NAS enclosure requires only a one-time purchase for long-term use. For example, you only need to pay $459.98 for a NAS, while for cloud storage, you need to pay $719.88 per year, $2,159.64 for 3 years, $3,599.40 for 5 years. You will save $6,738.82 over 10 years with UGREEN NAS! *NAS cost based on DH2300 + 12TB HDD; cloud cost based on 12TB plan (e.g. $59.99/month).
  • Blazing Speed, Minimal Power: Equipped with a high-performance processor, 1GbE port, and 4GB RAM on Board, this NAS handles multiple tasks with ease. File transfers reach up to 125MB/s—a 1GB file takes only 8 seconds. Don't let slow clouds hold you back; they often need over 100 seconds for the same task. The difference is clear.
  • Let AI Better Organize Your Memories: UGREEN NAS uses AI to tag faces, locations, texts, and objects—so you can effortlessly find any photo by searching for who or what's in it in seconds. It also automatically finds and deletes similar or duplicate photo, backs up live photos and allows you to share them with your friends or family with just one tap. Everything stays effortlessly organized, powered by intelligent tagging and recognition.

Common failures and how to diagnose them

The dashboard shows an encryption error

The target is usually using an APP_KEY that does not match the dump. Stop and verify the complete line from the original /data/coolify/source/.env; do not generate a new key for an existing encrypted database.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Projects or resources are missing

Check that you restored the intended non-empty .dmp and that pg_restore connected to the target Coolify database rather than another PostgreSQL database. Confirm the installer completed its migrations afterward.

Managed servers do not connect

Check the restored SSH key directory and authorized_keys, then verify network access and the server identities recorded in the restored instance. A database restore alone does not recreate missing private keys.

The restore stops with database errors

Confirm that coolify-db is healthy, the connection variables point to the target, and the target has enough space. Because --exit-on-error stops at the first failure, resolve that error and rerun against a clean, intentionally prepared target rather than assuming later objects loaded correctly.

The dashboard works but application data is gone

This is expected when only the instance dump was restored. Import the workload database backup and restore the relevant volumes, mounts, files, and external storage using their separate procedures.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How often to test recovery

Test a representative dump on a disposable server on a schedule appropriate to the value of the workloads. A useful test includes downloading a remote copy, supplying the separately stored APP_KEY, importing the database, rerunning the installer, and checking credentials and managed-server access. Restore at least one workload database and a sample volume or directory as well.

Record the elapsed time, software version, commands, errors, and missing prerequisites. Update the recovery record whenever retention, storage destinations, server keys, or Coolify versions change. This turns a collection of backup files into a repeatable recovery procedure.

Quick Recap

SaleBestseller No. 1
Western Digital 8TB My Book Desktop External Hard Drive, USB 3.0, External HDD with Password Protection and Backup Software - WDBBGB0080HBK-NESN
Western Digital 8TB My Book Desktop External Hard Drive, USB 3.0, External HDD with Password Protection and Backup Software - WDBBGB0080HBK-NESN
256-bit AES hardware encryption; SuperSpeed USB (5 Gbps); USB 2.0 compatible; Trusted storage built with WD reliability
$329.99
Bestseller No. 2
Seagate One Touch 24TB External Hard Drive Desktop HDD - USB-C Compatible with Most Windows and macOS, Rescue Recovery (STNB24000400)
Seagate One Touch 24TB External Hard Drive Desktop HDD - USB-C Compatible with Most Windows and macOS, Rescue Recovery (STNB24000400)
No wall warts: Work freely with its bus-powered USB-C. No wall outlet required.; Big on space: High-capacity storage to store all your files in one place.
Bestseller No. 3
WD 2TB My Passport, Portable External Hard Drive, Black, backup software with defense against ransomware, and password protection, USB 3.1/USB 3.0 compatible - WDBYVG0020BBK-WESN
WD 2TB My Passport, Portable External Hard Drive, Black, backup software with defense against ransomware, and password protection, USB 3.1/USB 3.0 compatible - WDBYVG0020BBK-WESN
Slim durable design to help take your important files with you; Help secure your important files with password protection and hardware encryption
$132.00
Bestseller No. 4
BUFFALO LinkStation 210 4TB 1-Bay NAS Network Attached Storage with HDD Hard Drives Included NAS Storage that Works as Home Cloud or Network Storage Device for Home
BUFFALO LinkStation 210 4TB 1-Bay NAS Network Attached Storage with HDD Hard Drives Included NAS Storage that Works as Home Cloud or Network Storage Device for Home
4TB capacity – 1 Drive bay, HDD included.; Made in Japan – Quality Devices.; 24/7 US-based support, with 2-year warranty, including hard drives.
$192.99

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.