Change protected paths after installing Safenix

Change the protected paths on the server, not from the Safenix dashboard. Edit SAFENIX_PATHS in the agent configuration, then restart the service.

Update the protected paths

1. On the server, as root, open the agent configuration file:

nano /etc/safenix/agent.env

2. Modify the SAFENIX_PATHS line with the new list of paths. Separate multiple paths with commas.
3. Restart the Safenix agent:

systemctl restart safenix-agent

The new list is read when the service starts. The next backup covers the updated paths.

Do not rerun the installation command

Rerunning the installation command with different paths does not work as an alternative. That command always requires the server token. The token is shown only once during registration and cannot be recovered from the dashboard.

If the server is already installed, the token is still present in /etc/safenix/agent.env. However, changing the SAFENIX_PATHS line directly is simpler.

What happens to existing backups

Changing the paths does not delete anything. Each previous backup remains as it was created, including the paths that were protected at that time, and remains restorable until it leaves the plan's retention window.

When you add a path

The added path is included starting with the next backup. Protection is not retroactive. If a file was modified or deleted before its path was added, that file will not be present in any backup.

When you remove a path

Backups that contain the removed path remain restorable until their normal expiration.