I’m experiencing a strange issue with HestiaCP. Local backups are being created automatically every few seconds, even though I have no cron jobs configured for any user to trigger backups.
This happens between 5:00 and 9:00 AM and affects multiple users. Below is a short snippet of the log (there are hundreds of such entries):
yaml
KopiujEdytuj
20 Jun 2025 07:48:27 Backup created (User: [user1], Archive: 2025-06-20_07-48-13.tar).
20 Jun 2025 07:48:27 Backup created (User: [user1], Archive: 2025-06-20_07-48-12.tar).
20 Jun 2025 07:48:24 Backup created (User: [user1], Archive: 2025-06-20_07-48-07.tar).
...
20 Jun 2025 07:40:45 Backup created (User: [user1], Archive: 2025-06-20_07-40-38.tar).
20 Jun 2025 07:40:42 Backup created (User: [user2], Archive: 2025-06-20_07-40-37.tar).
Users anonymized in this post, but this repeats for several accounts. I’ve double-checked all cron jobs, both system-wide and user-level — none are related to backups.
Any ideas what could cause this behavior or how to debug it?
/var/spool/cron/crontabs/hestiaweb.vst.back:*/5 * * * * sudo /usr/local/hestia/bin/v-update-sys-queue backup
/var/spool/cron/crontabs/hestiaweb.vst.back:00 22 * * * sudo /usr/local/hestia/bin/v-backup-users
/var/spool/cron/crontabs/ravczy:# For example, you can run a backup of all your user accounts
/var/spool/cron/crontabs/ravczy:# 0 5 * * 1 tar -zcf /var/backups/home.tgz /home/
/var/spool/cron/crontabs/hestiaweb:*/5 * * * * sudo /usr/local/hestia/bin/v-update-sys-queue backup
/var/spool/cron/crontabs/hestiaweb:00 23 * * * sudo /usr/local/hestia/bin/v-backup-users
I noticed what seems to be a duplicate entry related to ‘backup users’ in the logs. I’ll extract the full logs from the server and review them in more detail to confirm.