← Back to Docs

Backup & Restore

Why Use Backup & Restore

A backup captures your full appliance configuration: VPN tunnels, routing rules, filtering profiles, device assignments, WireGuard server profiles, DNS rewrites, and your license binding. Restoring from a backup on new hardware is the cleanest way to migrate TLSOps between machines — it transfers everything in one step and re-binds your license to the new hardware automatically.

Exporting a Backup

  1. Log in to the dashboard
  2. Click the gear icon to open Settings
  3. Under the Backup & Restore card, click Export configuration
  4. Save the downloaded file somewhere safe — treat it like a sensitive credential

Note: backup export requires an active paid license. Restore from backup is available regardless of license state.

Best practice: export a backup before every planned migration or major configuration change.

Restoring on a New Machine (Recommended Migration Path)

  1. Install TLSOps on the new machine: curl -fsSL https://get.tlsops.com/install.sh | sudo bash
  2. Open the dashboard at http://<new-machine-ip>:8080
  3. On the first-run screen, click Restore from Backup instead of creating a new account
  4. Upload the .tlsops-backup file from your old machine
  5. Confirm the restore — all configuration, device assignments, and license data are applied immediately
  6. The license is re-bound to the new machine's hardware fingerprint automatically as part of the restore

Restoring on a Running Appliance

You can also restore a backup into an already-configured appliance to revert a misconfiguration:

  1. Click the gear icon to open Settings
  2. Under the Backup & Restore card, click Restore from backup
  3. Upload the backup file and confirm — the restore replaces the current configuration

Warning: this overwrites all current settings. Export a fresh backup first if you want to preserve the current state.

Hardware Migration Notes

  • Backup/restore is the recommended path for hardware migration — it handles license re-binding automatically
  • If you did not perform a first-boot restore and the new machine reports a license hardware binding mismatch, contact support with your license details to clear the binding
  • Hardware resets are throttled per license — see your plan's monthly reset allowance