---
title: "PostgreSQL Disaster Recovery with pgBackRest TLS Transport"
url: https://daily.dev/posts/postgresql-disaster-recovery-with-pgbackrest-tls-transport-iltuvmsnz
source_url: https://postgr.es/p/9oD
type: article
source: "Planet PostgreSQL"
published: 2026-07-07T15:47:31.502Z
updated: 2026-07-07T15:47:53.937Z
tags: ["postgresql"]
reading_time: 11
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# PostgreSQL Disaster Recovery with pgBackRest TLS Transport

**[Planet PostgreSQL](https://daily.dev/sources/planet-postgresql)** · 11 min read · 0 upvotes · 0 comments

## Summary

A step-by-step guide to configuring pgBackRest's native TLS transport mode for PostgreSQL disaster recovery, as an alternative to SSH-based setups. Covers the security rationale (eliminating lateral movement risk, certificate-based access control), building a CA and issuing server/client certificates with OpenSSL, configuring the TLS server daemon on the Backup Node, setting up the DR server, performing full and point-in-time restores, and critical post-restore steps like disabling archive_mode. Also discusses pgBackRest's lack of CRL support and when TLS mode is preferable to SSH at scale.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://postgr.es/p/9oD>

---

Tags: [#postgresql](https://daily.dev/tags/postgresql)

[View this post on daily.dev](https://daily.dev/posts/postgresql-disaster-recovery-with-pgbackrest-tls-transport-iltuvmsnz)