Connecting to the PBS server

The Target screen (key 2) defines the Proxmox Backup Server that backups will be sent to. It is the first thing to configure.

The fields

Field	Purpose
PBS server URL	The server address, for example https://pbs.example.com:8007.
Certificate fingerprint	SHA-256 fingerprint of the server certificate, useful when the certificate is self-signed.
Auth ID	API token identifier, in the form user@realm!token-name.
Secret	The secret tied to the API token.
Datastore	Name of the destination datastore on the server.
Namespace	Namespace within the datastore. Optional.
Backup ID	Backup identifier, defaults to the hostname. Optional.
Encryption key	Path to the key file used to encrypt backups. Optional; see Encryption.

Every field is validated before being saved: an invalid format is flagged right away.

The API token

Cloud-PBS TUI authenticates to the server with an API token, not a user password. The token is created on the PBS server (or from the Cloud-PBS dashboard) and is made of two parts: the Auth ID and the Secret.

The secret is shown only once, when the token is created. In the Target screen it is masked as you type.

Token permissions

The available operations depend on the privileges granted to the token on the datastore:

• Datastore.Backup: allows writing backups.
• Datastore.Read or Datastore.Audit: allow listing and restoring backups.

A token limited to Datastore.Backup can therefore send backups without being able to read them back. The Backups screen tests the permissions and clearly reports this case rather than failing without explanation.

Test the connection

Once the fields are filled in, the Test action checks that the server is reachable and that the token is accepted. Testing the target before going further avoids discovering a connection problem at backup time.

The configuration is saved automatically when you switch screens; see Configuration and files.

Next step

With the target defined, move on to selecting the sources.