About faaleoleo

The Backup Factory

Infrastructure specialists who built a managed Bacula Enterprise service — so enterprises get world-class backup without becoming backup engineers.

Who we are

faaleoleo is a managed infrastructure service based in Germany, founded in 2024. We specialise in one thing: deploying and operating Bacula Enterprise backup infrastructure for enterprises that need reliability without the operational overhead.

Our team brings together specialists in enterprise backup, Linux security hardening, and regulatory compliance. We have operated Bacula environments in financial services, healthcare, and public sector organisations — environments where losing data is not an option and where compliance with NIS2, NIST, and DORA is mandatory.

Why we exist

Bacula Enterprise is among the most capable backup systems available. It is used by NASA and proven in demanding multi-site enterprise environments. It handles scenarios that most commercial backup products cannot.

The problem is that running it correctly is hard. Secure OS configuration, firewall rules, encryption, configuration validation, patch management, and incident response all require specialised expertise. Most organisations either hire expensive internal specialists or depend on unpredictable consulting arrangements.

We built faaleoleo to be the third option: a fully managed service that delivers Bacula's power as a subscription. You get enterprise-grade backup without needing to build or maintain the expertise in-house. We handle everything operational. You keep full data ownership and control.

How we work

Every deployment we manage goes through a six-stage automated quality pipeline before reaching a production environment:

  1. Static analysis — configuration and code checked against known patterns and policy rules
  2. Clean-room deployment rehearsal — the full installation is rehearsed in an isolated environment from scratch
  3. Daemon-validated configuration — Bacula daemons validate the configuration directly; no guessing
  4. CVE scanning — all components checked against current vulnerability databases
  5. Signed release tags — every release is cryptographically signed
  6. Audit report — a complete audit trail is produced with every deployment

Nothing reaches a customer environment without passing all six stages. Compliance documentation and audit reports are included with every release.

Open source

The tooling we built to automate Bacula deployments is published at git.faaleoleo.io, hosted on our own self-managed Forgejo instance. This includes deployment automation frameworks, configuration validators, monitoring integrations, and shared libraries — software we run in live customer environments, available free to use and fork.

We chose Forgejo because our open-source home should itself be open source, governed transparently and not subject to commercial interests.

Compliance

Our standard deployments are compliance-ready for:

Configuration documentation, audit trails, and security hardening reports are produced automatically as part of every deployment pipeline.

Want to talk to the team?

We are happy to discuss your backup infrastructure — no commitment required.

info@faaleoleo.io