ATLAS-RES
Atlas Resilience
Backup & Disaster Recovery
3-2-1 backups with restores actually tested before handover — immutable on-site snapshots and encrypted offsite copies you own outright.
Why this exists
The problem Atlas Resilience solves
Without Atlas Resilience
Backups run nightly to a NAS in the same room as the servers. A water leak destroys everything. Nobody has tested a restore in 18 months — when last tested, the backup was corrupt. A ransomware attack encrypts both primary storage and the network backup because the backup share is mapped on all workstations. DORA Art. 12 requires tested recovery — untested backups do not count.
With Atlas Resilience
Bareos runs full weekly + incremental daily, monitored and restored through the Bareos WebUI — a browser interface for job status, browse-and-restore and role-based (ACL) access, so operators never depend on the console. TrueNAS ZFS snapshots are immutable — ransomware cannot encrypt them because they are read-only. An AES-256 encrypted S3 copy goes to Hetzner Object Storage nightly — geographically separated. Restore is tested on-site before handover. DR runbooks document exact commands to restore each critical service, with expected durations and decision points.
Architecture
How it works
Architecture overview — Atlas Resilience component relationships
Regulatory compliance
What Atlas Resilience satisfies
| Regulation / Control | Requirement | Audit evidence |
|---|---|---|
| NIS2 Art. 21(2)(c) | Backup, disaster recovery, and crisis management capabilities required | Bareos job history · tested restore log · RTO/RPO documentation |
| DORA Art. 12(1) | Documented backup scope, frequency, retention, and tested restoration | Bareos policy export · restore test log with timestamps |
| DORA Art. 12(4) | Backup restoration must be periodically tested, not just configured | Restore test log · RTO measurement · sign-off by IT lead |
| GDPR Art. 32(1)(c) | Backup ensures availability and resilience of personal data processing | TrueNAS replication log · S3 offsite backup confirmation |
| BSI OPS.1.2.2 | Documented DR procedures, tested restore, recovery time targets | DR runbook · tested restore certificate · RTO/RPO targets |
| BSI OPS.2.2 | 3-2-1 rule, encryption, offsite copy, regular restore test required | Bareos config · TrueNAS snapshot log · S3 access log |
Standalone installation
Install one component — no full integration required
Each component can be deployed independently. Download the Customer Request Form, describe your environment, and we quote within 2 business days.
Bareos backup — standalone
Bareos 22.x director + storage daemon + file daemon on up to 5 hosts. Full weekly + incremental daily schedule. Email report on completion/failure. Zabbix alert on failure. Retention policy configured. Restore test included.
- Bareos director + storage daemon
- File daemon on 5 hosts
- Full weekly + incremental daily
- Retention policy
- Email + Zabbix alert on failure
- Restore test included
€ 620
Net, excl. VAT · travel within 100km Hamburg · hardware not included
Download CRF & request quoteS3 offsite backup config
Configure AES-256 encrypted offsite backup to S3-compatible storage (Hetzner Object Storage, AWS S3, or Backblaze B2) for existing backup solution. Retention policy, cost estimate, first successful backup verified.
- S3-compatible offsite config
- AES-256 encryption
- Retention + lifecycle policy
- Cost estimate provided
- First backup verified
- 5-day post-install support
€ 420
Net, excl. VAT · travel within 100km Hamburg · hardware not included
Download CRF & request quoteDR runbook creation
Document and test recovery for up to 3 critical services. Each runbook: recovery steps, Vault credential references, expected recovery time, dependencies, decision tree. One live recovery test per service.
- Runbook for 3 critical services
- Recovery steps + dependencies
- Vault credential references
- RTO/RPO targets
- One live recovery test
- Sign-off certificate
€ 350
Net, excl. VAT · travel within 100km Hamburg · hardware not included
Download CRF & request quote
Note: Standalone components do not include cross-product integration. To have it fitted into your existing environment, add the Integration package from the consulting section below.
Ready-made boxes
Foundation · Plus · Enterprise — fixed price, plug & play
Three boxes, three fixed prices. Each one ships pre-configured and pre-hardened: you power it up, work through a short quick-start guide, and it runs. No audit, no project phase, no consulting engagement required. Need it fitted into an existing environment instead? See the consulting packages below.
Foundation
5–50 users · 1 site · single server
Pre-configured · quick-start guide included
€ 1,840
Net, excl. VAT · one-off fixed price · hardware not included
- Bareos single storage daemon
- TrueNAS NAS storage + ZFS
- Full + incremental schedule
- S3 offsite encrypted copy
- Email alerts on failure
Plus
50–500 users · 1–5 sites · HA-ready
Pre-configured · quick-start guide included
€ 2,420
Net, excl. VAT · one-off fixed price · hardware not included
- Bareos multi-site
- TrueNAS replication site-to-site
- S3 offsite with versioning
- Automated restore testing
- Zabbix backup monitoring
Enterprise
500+ users · multi-site · cluster-ready
Pre-configured · quick-start guide included
€ 3,120
Net, excl. VAT · one-off fixed price · hardware not included
- Bareos cluster + HA SD
- TrueNAS Enterprise HA
- Multi-region S3 replication
- Quarterly DR drill
- RTO under 4h for critical systems
Consulting services
Need more than the box?
The boxes are built to run on their own. When you want one fitted into what you already have, add a fixed-price package — no open-ended day rates.
Installation & handover
We install the box in your environment, connect it to your network and DNS, and hand it over configured and documented. Remote, or on-site within 100 km of Hamburg.
- Installed and connected on your side
- Admin walkthrough session
- Configuration handed over documented
€ 890
Net, excl. VAT · fixed price
Request this packageIntegration into your environment
Connecting the box to what you already run — Active Directory, an existing DNS or firewall, your monitoring or SIEM — including migration of existing data.
- Integration with 2 existing systems
- Data / config migration
- Rollback plan and test protocol
€ 1,890
Net, excl. VAT · fixed price
Request this packageCompliance mapping & audit support
We map the delivered configuration to NIS2, BSI IT-Grundschutz or DORA controls and hand over the evidence package your auditor will ask for.
- Control mapping per regulation
- Evidence package for the auditor
- Gap list with remediation steps
€ 1,490
Net, excl. VAT · fixed price
Request this packageLarger scope? Multi-site rollouts, custom engineering and ongoing operations are quoted individually. Tell us what you need and we come back with a fixed price.