Culmen Backup & Restore Kit

Scheduled backup for RouterOS boards and the servers behind them, with off-site copies and a restore path that has been exercised rather than assumed.

What it covers

• RouterOS configuration exported per board on a schedule, secrets included, through a dedicated backup-only account
• Database dumps for RADIUS and your panel
• Panels, customer portal and websites archived with their server configuration, not just the routers
• Encrypted before it leaves the server — a RADIUS database holds customer credentials, so nothing goes off-site in the clear
• Off-site copies to a second provider, so one account closure is not the end
• Nightly at a fixed local hour, with a stale guard — the morning digest says plainly when last night's run did not complete, instead of showing yesterday's success
• Failure alerts — a backup job that stops running is worse than no backup, because you think you are covered

The masked-export problem

RouterOS hides sensitive values in a plain export by default. A backup taken that way restores a config that looks complete and does not work, and you find out during an outage. The kit exports with sensitive values and checks every archive for them — PPP secrets, WireGuard private keys and the rest — so a masked export is flagged instead of filed as a good backup, and a board with no local PPP users is not flagged by mistake.

Why not a binary backup

A binary .backup only restores onto the same board model and a compatible RouterOS version, and taking one unattended needs an account that could also reconfigure the board. The kit's export restores onto any replacement hardware, which is the case that matters when a board dies.

Cost

Unimus is $6.90 per device per year, or $9,900 a year unlimited. For a handful of boards, a one-time licence is the cheaper shape.