Hi Stian I am a bit confused by this answer. Especially because I already brought up this question last November and got the advice from Sebasien Blanc to „just start another instance“. You had a thought whether using a DB tool would be more efficient. http://lists.jboss.org/pipermail/keycloak-user/2017-November/012156.html Can you explain why there is a chance that we would get inconsistent data? Cheers Michael Von: Stian Thorgersen [mailto:sthorger@redhat.com] Gesendet: Mittwoch, 7. Februar 2018 10:56 An: Knurr, Michael <Michael.Knurr(a)adesso.ch&gt; Cc: Corentin Dupont <corentin.dupont(a)gmail.com>; keycloak-user <keycloak-user(a)lists.jboss.org&gt; Betreff: Re: [keycloak-user] backup strategy Exporting while live is really not recommended as you can get inconsistent data that you won't be able to use. On 7 Feb 2018 10:46 am, "Knurr, Michael" <Michael.Knurr@adesso.ch<mailto:Michael.Knurr@adesso.ch>> wrote: Hi Corentin For my Keycloak installation I am doing daily exports/backups to the file system. Especially the question "how to make it stop" gave me a major headache. In order to work around this problem, I wrote a script which does all the work for me. You can just schedule it in crontab and it will start a second keycloak instance, do the export and eventually kill the second instance. I uploaded it as a gist, so you may also use it if you like: https://gist.github.com/michaelknurr/a8f1941c6f40c0d784b1e467fbc694ba Cheers Michael -----Ursprüngliche Nachricht----- Von: Corentin Dupont [mailto:corentin.dupont@gmail.com<mailto:corentin.dupont@gmail.com>] Gesendet: Dienstag, 6. Februar 2018 12:09 An: keycloak-user <keycloak-user@lists.jboss.org<mailto:keycloak-user@lists.jboss.org>> Betreff: [keycloak-user] backup strategy Hi guys, I wonder what the backup strategy is? Is it good practice to export regularly all Keycloak configuration? I can export with the command: ./keycloak/bin/standalone.sh -Dkeycloak.migration.action=export -Dkeycloak.migration.provider=singleFile -Dkeycloak.migration.file=export-`date +"%m-%d-%y"`.json -Djboss.http.port=8888 -Djboss.https.port=9999 -Djboss.management.http.port=7777 It exports the current configuration (realms, users...). I set different ports so it can run concurently with the running instance of keycloak. I can set a cron job with the command, but unfortunately this command need to be stopped by Ctrl-C. -> How to make it stop after the export? Other question, the export need to be run on the same container than Keycloak, but this is not very practical in a Cloud setting. I use Amazon ECS, so I have to log in the VM and then the container. I have then to extract the file with various scp. Is there any way to make this easier (i.e. with an API command)? Cheers Corentin _______________________________________________ keycloak-user mailing list keycloak-user@lists.jboss.org<mailto:keycloak-user@lists.jboss.org> https://lists.jboss.org/mailman/listinfo/keycloak-user