GWS Backup runs as a self-contained Node application. One platform is released today; the other two are built and in testing. Every file is listed with its size and a SHA-256, so you can check what you got before you run it.

v0.96 BETA · published 2026-08-31

Installing

  1. Create a randomly-named subdomain and run AutoSSL on it. Not backup.yourdomain.com — bots scan the obvious names.
  2. Create the Node.js application with its root outside public_html and its startup file set to app.js. The application folder holds your encrypted credentials and recovery key; under the web root, one misconfiguration puts them within reach of anyone.
  3. Upload both files into that folder and run the installer from cPanel’s Terminal. It backs up any existing database — including every per-client database — before it extracts anything.
  4. Set NEXTAUTH_URL to your full https:// address, start the app, and finish setup in the browser.

Read the full install guide

Built and in testing. There is nothing to download yet, and we would rather be late than hand you an installer that eats an afternoon.

It will install the runtime, register the app as a service and handle its own updates — no terminal work. When it is ready it will appear here, be announced in the news section, and show up inside the app itself for anyone already running it.

v0.96 BETA · ghcr.io/kikosolutions-tech/gwsbackup

The image carries its own Node runtime, so there is nothing to install first and no version to check. Download the two files below into an empty directory, fill in two generated secrets, and start it.

Installing

  1. Generate the two secrets and put them in .env: openssl rand -hex 32 for ENCRYPTION_KEY, and openssl rand -base64 32 for NEXTAUTH_SECRET.
  2. Start it: docker compose up -d. The image is pulled for you; there is nothing to build.
  3. Open the console on port 3000, create your administrator account, save the recovery key, and paste in your licence key.

Keep .env safe, and separate from the server. ENCRYPTION_KEY decrypts every stored client credential. If it is lost, those credentials cannot be recovered by us or by anyone, and every client connection has to be set up again. The container refuses to start rather than quietly generating a replacement, so a mistake here shows up as a container that will not boot — not as silent data loss.

Read the full Docker install guide

Updating

Set GWSB_VERSION in .env to the new version, then docker compose pull && docker compose up -d. Your databases live in a Docker volume rather than in the image, so an update does not touch them.

Before you start

Two things stop the application dead if they are missing, and it is much less annoying to find out now than halfway through:

The full list, including PHP and Google Workspace requirements, is on the minimum specs page.

Installing

  1. Create a randomly-named subdomain and run AutoSSL on it. Not backup.yourdomain.com — bots scan the obvious names.
  2. Create the Node.js application with its root outside public_html and its startup file set to app.js. The application folder holds your encrypted credentials and recovery key; under the web root, one misconfiguration puts them within reach of anyone.
  3. Upload both downloaded files into that folder, then run the installer from cPanel’s Terminal — php gwsbackup-cpanel-0.96-installer.php, with whichever version you downloaded. It backs up any existing database before it extracts anything.
  4. Set NEXTAUTH_URL to your full https:// address, start the app, and finish setup in the browser.

Read the full install guide

Updating an existing install? Upload the new -app.zip and its matching -installer.php, then run the installer. It refuses to extract a payload whose version does not match its own, and clears out installers from earlier releases once it has finished — so the only one left in the folder is always the current one.

Licence

Use of GWS Backup is subject to the GWS Backup Free Licence — free for up to ten client workspaces, personal and commercial use alike, including serving your own paying clients. It is not open source: no rebranding, reselling or redistribution.

You will be asked to accept the licence inside the application before you can use it, and your acceptance is recorded there with the version and date. Downloading is not acceptance; running it is.

Something wrong?

If a download fails, a checksum does not match, or the installer stops with an error, email support@gwsbackup.com and a person will read it. Support is free, and stays free for as long as we can manage it.