DavRoll setup guide

Connect B2, R2, Wasabi, or MinIO as an S3 backup

Use the provider preset to select addressing and region defaults, then enter the real endpoint and bucket-scoped keys shown in the provider console.

Updated August 4, 2026 · Based on each provider's official S3 compatibility documentation

Before you begin: DavRoll does not create buckets or change IAM policies. Create the bucket and key in the storage console first, and limit the key to the list, read, and write operations needed for that bucket. Never include a secret key in notes, screenshots, or support requests.
Background operation: Background new-photo discovery is a separate opt-in and is off by default. When enabled, it checks up to 80 items per run; the operating system decides the actual schedule. DavRoll never opens a permission prompt from the background.

Connection steps

  1. Open Settings → Backup location → Advanced storage → S3 in DavRoll.
  2. Select the Storage provider and compare the preset with the console values.
  3. Enter the bucket, optional prefix, access key, and secret key.
  4. Tap Test and save to verify the real bucket connection.
  5. Run a small manual backup, then confirm the Verified state and browse it in Restore Center.
ProviderEndpoint / regionAddressing
Backblaze B2https://s3.<region>.backblazeb2.com
Example region: us-west-004. Copy both values from Buckets.		Path-style preset
Cloudflare R2https://<ACCOUNT_ID>.r2.cloudflarestorage.com
region: auto		Path-style preset
Wasabihttps://s3.<region>.wasabisys.com
US East 1: https://s3.wasabisys.com / us-east-1		Path-style preset
MinIOThe public HTTPS API endpoint supplied by the operator
default region: us-east-1		Path-style preset

Provider preparation

Backblaze B2

Copy the S3 endpoint and region from Buckets. In App Keys, create an application key restricted to the target bucket. Enter keyID as the access key and applicationKey as the secret key. Official Backblaze S3-compatible API guide

Cloudflare R2

Create a bucket, then create an API token with Object Read & Write permission for that bucket only. Copy the S3 API endpoint from the token result or R2 Overview and use auto as the region. Official Cloudflare R2 S3 guide

Wasabi

Use the service URL and region that exactly match the bucket location. Prefer bucket-scoped sub-user keys instead of root keys. Official Wasabi region URL list

MinIO

DavRoll accepts HTTPS endpoints only, so the externally reachable API endpoint needs a valid TLS certificate. Enter the S3 API endpoint rather than the Console address, and restrict a dedicated user or service account to the target bucket.

Verification: DavRoll does not count an S3 or WebDAV upload as complete from the transfer response alone. It reads the remote object and records it as verified only when its SHA-256 matches.

If connection testing fails