- the complete database;
- the
.envfile and any deployment-specific configuration; storage/, including the install marker, private files, and local uploads;- remote object-storage buckets or their replication/versioning policy;
- custom themes, templates, or code changes kept outside the original package;
- worker, cron, proxy, and WebSocket service definitions.
Encrypt backups, restrict access, keep copies outside the application server, and test restores. A database-only restore may leave missing knowledge sources or mismatched attachments; a file-only restore may leave resources the database no longer references.