Add configurable backup mode ftp

2026-06-23 19:51:33 +00:00 · 2026-06-18 14:26:29 -05:00 · 2026-06-18 14:26:29 -05:00 · 73680ea1a7
commit 73680ea1a7
parent 19d68b4398
2 changed files with 395 additions and 49 deletions
--- a/BackupAndUpdate.rsc
+++ b/BackupAndUpdate.rsc
@ -51,6 +51,24 @@
 # Include public IP info in email if set to true
 :local detectPublicIpAddress true

+# Backup transport methods (array)
+# Possible values: email, ftp
+# Examples: {"email"}  or  {"ftp"}  or  {"email";"ftp"}
+:local backupTransport {"email"}
+
+# FTP upload settings (only used if backupTransport includes "ftp")
+# Supports FTP and SFTP via URL scheme (ftp://, sftp://)
+# backupFtpUrl: Server only, no path. Example: "ftp://192.168.1.10" or "sftp://host.example.com"
+# backupFtpPath: Remote directory path. Example: "/backups/mikrotik/" (must start and end with /)
+#                Supports %identity% placeholder which will be replaced with device identity name
+#                Example: "/backups/%identity%/" -> "/backups/myrouter/"
+# backupFtpUser: The default user for "/tool fetch", is "anonymous", leaving this value empty here
+# 				 will use the default for "/tool fetch"
+:local backupFtpUrl ""
+:local backupFtpPath "/"
+:local backupFtpUser ""
+:local backupFtpPassword ""
+
 ## Allow anonymous statistics collection. (script mode and generic non-sensitive device info)
 :local anonStats true

@ -132,8 +150,8 @@
 #  $2 - password (optional)
 #  $3 - sensitive data in config (optional, default: false)
 # Example:
-# :put [$FuncCreateBackups "daily-backup"]
-:local FuncCreateBackups do={
+# :put [$BkpUpdFuncCreateBackups "daily-backup"]
+:global BkpUpdFuncCreateBackups do={
  :local backupName $1
  :local backupPassword $2
  :local sensitiveDataInConfig $3
@ -141,7 +159,7 @@
  #Script messages prefix
  :local SMP "Bkp&Upd:"
  :local exitErrorMessage "$SMP script stopped due to an error. Please check logs for more details."
-  :log info ("$SMP global function `FuncCreateBackups` started, input: `$backupName`")
+  :log info ("$SMP global function `BkpUpdFuncCreateBackups` started, input: `$backupName`")

  # validate required parameter: backupName
  :if ([:typeof $backupName] != "str" or [:len $backupName] = 0) do={
@ -197,11 +215,72 @@
    :error $exitErrorMessage
  }

-  :log info ("$SMP global function `FuncCreateBackups` finished. Created backups, system: `$backupFileSys`, config: `$backupFileConfig`")
+  :log info ("$SMP global function `BkpUpdFuncCreateBackups` finished. Created backups, system: `$backupFileSys`, config: `$backupFileConfig`")

  :return $backupNames
 }

+# Uploads backup files to FTP/SFTP server
+# Parameters:
+#  $1 - server URL (e.g. "ftp://server" or "sftp://host")
+#  $2 - remote path (e.g. "/backups/mikrotik/")
+#  $3 - file attachments (array of filenames)
+#  $4 - username (optional)
+#  $5 - password (optional)
+#
+# Example:
+# $BkpUpdFuncUploadBackupsFtp "ftp://192.168.1.10" "/backups/" {"backup.backup";"backup.rsc"} "user" "pass"
+:global BkpUpdFuncUploadBackupsFtp do={
+
+  :local ftpUrl $1
+  :local ftpPath $2
+  :local fileList $3
+  :local ftpUser $4
+  :local ftpPassword $5
+
+  :local SMP "Bkp&Upd:"
+  :local exitErrorMessage "$SMP script stopped due to an error. Please check logs for more details."
+
+  :log info "$SMP Attempting to upload backups to `$ftpUrl$ftpPath`"
+
+  :if ([:len $ftpUrl] = 0) do={
+    :log error "$SMP FTP URL is not configured"
+    :error $exitErrorMessage
+  }
+
+  :if ([:len $fileList] = 0) do={
+    :log info "$SMP No files to upload"
+    :return true
+  }
+
+  :foreach fileName in=$fileList do={
+    :local remotePath "$ftpPath$fileName"
+    :log info "$SMP Uploading file `$fileName` to `$ftpUrl$remotePath`"
+
+    :do {
+      # Check if file exists
+      :if ([:len [/file find name=$fileName]] = 0) do={
+        :log error "$SMP File not found: $fileName"
+        :error "File not found"
+      }
+
+      :if ([:len $ftpUser] > 0 and [:len $ftpPassword] > 0) do={
+        /tool fetch url=$ftpUrl upload=yes src-path=$fileName dst-path=$remotePath user=$ftpUser password=$ftpPassword
+      } else={
+        /tool fetch url=$ftpUrl upload=yes src-path=$fileName dst-path=$remotePath
+      }
+      :delay 2s
+
+      :log info "$SMP File `$fileName` uploaded successfully"
+    } on-error={
+      :log error "$SMP Failed to upload file `$fileName` to `$ftpUrl$remotePath`"
+      :error $exitErrorMessage
+    }
+  }
+
+  :log info "$SMP All backup files uploaded successfully"
+}
+
 # Sends an email
 # Parameters:
 #  $1 - to (email address)
@ -210,8 +289,8 @@
 #  $4 - file attachments (optional; pass "" if not needed)
 #
 # Example:
-# $FuncSendEmailSafe "admin@domain.com" "Backup Done" "Backup complete." "backup1.backup"
-:local FuncSendEmailSafe do={
+# $BkpUpdFuncSendEmailSafe "admin@domain.com" "Backup Done" "Backup complete." "backup1.backup"
+:global BkpUpdFuncSendEmailSafe do={

  :local emailTo $1
  :local emailSubject $2
@ -272,6 +351,57 @@
  }
 }

+# Sends backups via configured transport method(s)
+# Parameters:
+#  $1 - email address
+#  $2 - email subject
+#  $3 - email body
+#  $4 - file attachments (array)
+#  $5 - backup transport methods (array)
+#  $6 - FTP URL
+#  $7 - FTP path
+#  $8 - FTP user (optional)
+#  $9 - FTP password (optional)
+#
+# Example:
+# $BkpUpdFuncSendBackups $emailAddress $subject $body $files {"email";"ftp"} "ftp://server" "/backups/" "user" "pass"
+:global BkpUpdFuncSendBackups do={
+
+  # Declare functions that will be called (required for RouterOS scope rules)
+  :global BkpUpdFuncSendEmailSafe;
+  :global BkpUpdFuncUploadBackupsFtp;
+
+  :local emailTo $1
+  :local emailSubject $2
+  :local emailBody $3
+  :local fileAttachments $4
+  :local transportMethods $5
+  :local ftpUrl $6
+  :local ftpPath $7
+  :local ftpUser $8
+  :local ftpPassword $9
+
+  :local SMP "Bkp&Upd:"
+
+  # Check if transport methods contains "email"
+  :local useEmail false
+  :foreach method in=$transportMethods do={
+    :if ($method = "email") do={ :set useEmail true }
+  }
+  :if ($useEmail = true) do={
+    $BkpUpdFuncSendEmailSafe $emailTo $emailSubject $emailBody $fileAttachments
+  }
+
+  # Check if transport methods contains "ftp"
+  :local useFtp false
+  :foreach method in=$transportMethods do={
+    :if ($method = "ftp") do={ :set useFtp true }
+  }
+  :if ($useFtp = true) do={
+    $BkpUpdFuncUploadBackupsFtp $ftpUrl $ftpPath $fileAttachments $ftpUser $ftpPassword
+  }
+}
+
 # Global variable to track current update step
 # They need to be initialized here first to be available in the script
 :global buGlobalVarTargetOsVersion
@ -289,30 +419,89 @@
 # Initial validation
 #

-## Check email settings
-:if ([:len $emailAddress] < 3) do={
-  :log error ("$SMP Parameter `\$emailAddress` is not set, or contains invalid value. Script stopped.")
+# Backup transport validation
+:local validTransports {"email";"ftp"}
+
+:if ([:typeof $backupTransport] != "array") do={
+  :log error ("$SMP Script parameter `\$backupTransport` must be an array. Example: {\"email\"} or {\"email\";\"ftp\"}. Script stopped.")
  :error $exitErrorMessage
 }

-# Values will be defined later in the script
-:local emailServer ""
-:local emailFromAddress [/tool e-mail get from]
+:if ([:len $backupTransport] = 0) do={
+  :log error ("$SMP Script parameter `\$backupTransport` is empty. Possible values: email, ftp. Script stopped.")
+  :error $exitErrorMessage
+}

-:log info "$SMP Validating email settings..."
-:do {
-  :set emailServer [/tool e-mail get server]
-} on-error={
-  # This is a workaround for the RouterOS v7.12 and older versions
-  :set emailServer [/tool e-mail get address]
+:foreach transport in=$backupTransport do={
+  :local isValid false
+  :foreach validTransport in=$validTransports do={
+    :if ($transport = $validTransport) do={
+      :set isValid true
+    }
+  }
+  :if ($isValid = false) do={
+    :log error ("$SMP Script parameter `\$backupTransport` contains invalid value: `$transport`. Possible values: email, ftp. Script stopped.")
+    :error $exitErrorMessage
+  }
 }
-:if ($emailServer = "0.0.0.0") do={
-  :log error ("$SMP Email server address is not correct: `$emailServer`, check `Tools -> Email`. Script stopped.")
-  :error $exitErrorMessage
+
+:log info "$SMP Backup transport method(s): $backupTransport"
+
+# Check email settings (only if using email transport)
+# Note: Email configuration is also checked if emailAddress is set, even when not in backupTransport,
+# so that error notifications can be sent via email when using FTP-only for backups
+:local useEmail false
+:foreach method in=$backupTransport do={
+  :if ($method = "email") do={ :set useEmail true }
 }
-:if ([:len $emailFromAddress] < 3) do={
-  :log error ("$SMP Email configuration FROM address is not correct: `$emailFromAddress`, check `Tools -> Email`. Script stopped.")
-  :error $exitErrorMessage
+
+:local emailConfigured false
+:if ([:len $emailAddress] >= 3) do={
+  :set emailConfigured true
+}
+
+:if ($useEmail = true or $emailConfigured = true) do={
+  :if ([:len $emailAddress] < 3) do={
+    :log error ("$SMP Parameter `\$emailAddress` is not set, or contains invalid value. Script stopped.")
+    :error $exitErrorMessage
+  }
+
+  # Values will be defined later in the script
+  :local emailServer ""
+  :local emailFromAddress [/tool e-mail get from]
+
+  :log info "$SMP Validating email settings..."
+  :do {
+    :set emailServer [/tool e-mail get server]
+  } on-error={
+    # This is a workaround for the RouterOS v7.12 and older versions
+    :set emailServer [/tool e-mail get address]
+  }
+  :if ($emailServer = "0.0.0.0") do={
+    :log error ("$SMP Email server address is not correct: `$emailServer`, check `Tools -> Email`. Script stopped.")
+    :error $exitErrorMessage
+  }
+  :if ([:len $emailFromAddress] < 3) do={
+    :log error ("$SMP Email configuration FROM address is not correct: `$emailFromAddress`, check `Tools -> Email`. Script stopped.")
+    :error $exitErrorMessage
+  }
+}
+
+# Check FTP settings (only if using FTP transport)
+:local useFtp false
+:foreach method in=$backupTransport do={
+  :if ($method = "ftp") do={ :set useFtp true }
+}
+:if ($useFtp = true) do={
+  :if ([:len $backupFtpUrl] < 6) do={
+    :log error ("$SMP Parameter `\$backupFtpUrl` is not set, or contains invalid value. Script stopped.")
+    :error $exitErrorMessage
+  }
+  :if ([:len $backupFtpPath] = 0) do={
+    :log error ("$SMP Parameter `\$backupFtpPath` is not set. Script stopped.")
+    :error $exitErrorMessage
+  }
+  :log info "$SMP FTP upload configured: `$backupFtpUrl$backupFtpPath`"
 }

 # Script mode validation
@ -376,6 +565,24 @@
 :local deviceIdentityName     [/system identity get name]
 :local deviceIdentityNameShort  [:pick $deviceIdentityName 0 18]

+# Expand FTP path template if using FTP transport
+:local useFtp false
+:foreach method in=$backupTransport do={
+  :if ($method = "ftp") do={ :set useFtp true }
+}
+:if ($useFtp = true) do={
+  # Replace %identity% placeholder with actual device identity
+  :local expandedFtpPath $backupFtpPath
+  :local identityPos [:find $expandedFtpPath "%identity%"]
+  :if ([:typeof $identityPos] != "nil") do={
+    :local beforeIdentity [:pick $expandedFtpPath 0 $identityPos]
+    :local afterIdentity [:pick $expandedFtpPath ($identityPos + 10)]
+    :set expandedFtpPath "$beforeIdentity$deviceIdentityName$afterIdentity"
+  }
+  :set backupFtpPath $expandedFtpPath
+  :log info "$SMP FTP path expanded to: `$backupFtpPath`"
+}
+
 :local deviceRbModel        "CloudHostedRouter"
 :local deviceRbSerialNumber "--"
 :local deviceRbCurrentFw    "--"
@ -393,8 +600,8 @@
 :local deviceOsVerAndChannelRunning [/system resource get version]

 :local backupNameTemplate     "backup_v$runningOsVersion_$runningOsChannel_$currentDateTime"
-:local backupNameBeforeUpdate "backup_before_update_$backupNameTemplate"
-:local backupNameAfterUpdate  "backup_after_update_$backupNameTemplate"
+:local backupNameBeforeUpdate "backup_before_update_v$runningOsVersion_$runningOsChannel_$currentDateTime"
+:local backupNameAfterUpdate  "backup_after_update_v$runningOsVersion_$runningOsChannel_$currentDateTime"

 ## Email body template

@ -532,7 +739,11 @@
  :if ($forceBackup = true or $scriptMode = "backup" or $isOsNeedsToBeUpdated = true) do={
    :log info ("$SMP Starting backup process.")

-    :set isEmailNeedsToBeSent true
+    # Only set isEmailNeedsToBeSent if there's an actual notification (not routine backup)
+    # Routine backups in backup mode with FTP transport shouldn't trigger emails
+    :if ($isOsNeedsToBeUpdated = true) do={
+      :set isEmailNeedsToBeSent true
+    }

    :local backupName $backupNameTemplate

@ -549,10 +760,18 @@
    }

    :do {
-      :set mailAttachments [$FuncCreateBackups $backupName $backupPassword $sensitiveDataInConfig]
+      :set mailAttachments [$BkpUpdFuncCreateBackups $backupName $backupPassword $sensitiveDataInConfig]

      :set mailPtSubjectBackup "Backup created"
-      :set mailPtBodyBackup "System backups have been successfully created and attached to this email."
+      :set mailPtBodyBackup "System backups have been successfully created."
+      :foreach method in=$backupTransport do={
+        :if ($method = "email") do={
+          :set mailPtBodyBackup ($mailPtBodyBackup . " Backups are attached to this email.")
+        }
+        :if ($method = "ftp") do={
+          :set mailPtBodyBackup ($mailPtBodyBackup . " Backups uploaded via FTP.")
+        }
+      }
    } on-error={
      #failed to create backup
      :set isOsNeedsToBeUpdated false
@ -564,8 +783,8 @@
    }
  }

-  :if ($isEmailNeedsToBeSent = true) do={
-    :log info "$SMP Preparing to send email..."
+  :if ($isEmailNeedsToBeSent = true or [:len $mailAttachments] > 0) do={
+    :log info "$SMP Preparing to send backups via configured transport..."

    :local mailStep1Subject $mailSubjectPrefix
    :local mailStep1Body  ""
@ -579,10 +798,47 @@

    :set mailStep1Body ($mailStep1Body . $mailBodyDeviceInfo . "\n\n" . $mailBodyCopyright)

-    # Send email with backups
-    :do {$FuncSendEmailSafe $emailAddress $mailStep1Subject $mailStep1Body $mailAttachments} on-error={
+    # Send backups via configured transport
+    # Email notifications are sent when:
+    # 1. There's an important message (update available, error, etc.) - isEmailNeedsToBeSent = true
+    # 2. Email is in the transport array (routine backups with email transport)
+    :do {
+      :local shouldSendEmail false
+      :local emailAttachments ""
+
+      # Check if email transport is configured
+      :local useEmail false
+      :foreach method in=$backupTransport do={
+        :if ($method = "email") do={ :set useEmail true }
+      }
+
+      # Send email if: using email transport OR there's an important notification
+      :if ($useEmail = true) do={
+        :set shouldSendEmail true
+        :set emailAttachments $mailAttachments
+      } else={
+        # FTP-only: send email only for important notifications (not routine backups)
+        :if ($isEmailNeedsToBeSent = true and [:len $emailAddress] >= 3) do={
+          :set shouldSendEmail true
+          :set emailAttachments ""
+        }
+      }
+
+      :if ($shouldSendEmail = true) do={
+        $BkpUpdFuncSendEmailSafe $emailAddress $mailStep1Subject $mailStep1Body $emailAttachments
+      }
+
+      # If using FTP transport, upload backups
+      :local useFtp false
+      :foreach method in=$backupTransport do={
+        :if ($method = "ftp") do={ :set useFtp true }
+      }
+      :if ($useFtp = true and [:len $mailAttachments] > 0) do={
+        $BkpUpdFuncUploadBackupsFtp $backupFtpUrl $backupFtpPath $mailAttachments $backupFtpUser $backupFtpPassword
+      }
+    } on-error={
      :set isOsNeedsToBeUpdated false
-      :log error "$SMP The script will not proceed with the update process, because the email was not sent."
+      :log error "$SMP The script will not proceed with the update process, because backup transmission failed."
    }
  }

@ -614,8 +870,12 @@
      :local mailUpdateErrorSubject ($mailSubjectPrefix . " - Update failed")
      :local mailUpdateErrorBody "The script was unable to install new RouterOS version. Please check device logs for more details."

-      # Send email with error
-      $FuncSendEmailSafe $emailAddress $mailUpdateErrorSubject $mailUpdateErrorBody ""
+      # Send notification with error (always try email if configured, even if using FTP for backups)
+      :if ([:len $emailAddress] >= 3) do={
+        $BkpUpdFuncSendEmailSafe $emailAddress $mailUpdateErrorSubject $mailUpdateErrorBody ""
+      } else={
+        :log warning "$SMP Update failed notification not sent (email not configured)"
+      }

      :error $exitErrorMessage
    }
@ -660,9 +920,18 @@
    :set mailStep3Subject ($mailStep3Subject . " - Update completed - Backup created")
    :set mailStep3Body ($mailStep3Body . "RouterOS and routerboard upgrade process was completed")
    :set mailStep3Body ($mailStep3Body . "\nNew RouterOS version: v.$targetOsVersion, routerboard firmware: v.$deviceRbCurrentFw")
-    :set mailStep3Body ($mailStep3Body . "\n$changelogUrl\nBackups of the upgraded system are in the attachment of this email.\n\n$mailBodyDeviceInfo\n\n$mailBodyCopyright")

-    :set mailAttachments [$FuncCreateBackups $backupNameAfterUpdate $backupPassword $sensitiveDataInConfig]
+    :local useEmail false
+    :foreach method in=$backupTransport do={
+      :if ($method = "email") do={ :set useEmail true }
+    }
+    :if ($useEmail = true) do={
+      :set mailStep3Body ($mailStep3Body . "\n$changelogUrl\nBackups of the upgraded system are in the attachment of this email.\n\n$mailBodyDeviceInfo\n\n$mailBodyCopyright")
+    } else={
+      :set mailStep3Body ($mailStep3Body . "\n$changelogUrl\nBackups of the upgraded system have been uploaded.\n\n$mailBodyDeviceInfo\n\n$mailBodyCopyright")
+    }
+
+    :set mailAttachments [$BkpUpdFuncCreateBackups $backupNameAfterUpdate $backupPassword $sensitiveDataInConfig]
  } else={
    :log error "$SMP Failed to verify new RouterOS version: target: `$targetOsVersion`, current: `$runningOsVersion`"
    :set mailStep3Subject ($mailStep3Subject . " - Update failed")
@ -670,7 +939,8 @@
    :set mailStep3Body ($mailStep3Body . "The script was unable to verify that the new RouterOS version was installed, target version: `$targetOsVersion`, current version: `$runningOsVersion`\nCheck device logs for more details.\n\n$mailBodyDeviceInfo\n\n$mailBodyCopyright")
  }

-  $FuncSendEmailSafe $emailAddress $mailStep3Subject $mailStep3Body $mailAttachments
+  # Send backups via configured transport
+  $BkpUpdFuncSendBackups $emailAddress $mailStep3Subject $mailStep3Body $mailAttachments $backupTransport $backupFtpUrl $backupFtpPath $backupFtpUser $backupFtpPassword

  :if ([:len $mailAttachments] > 0) do={
    :log info "$SMP Cleaning up backup files from the file system..."
@ -678,7 +948,13 @@
    :delay 2s
  }

-  :log info "$SMP Final report email sent successfully, and the script has finished."
+  :log info "$SMP Final report sent successfully, and the script has finished."
 }

+# Clean up global functions from environment
+:do {/system script environment remove BkpUpdFuncCreateBackups} on-error={}
+:do {/system script environment remove BkpUpdFuncSendBackups} on-error={}
+:do {/system script environment remove BkpUpdFuncSendEmailSafe} on-error={}
+:do {/system script environment remove BkpUpdFuncUploadBackupsFtp} on-error={}
+
 :log info "$SMP the script has finished, script step: `$scriptStep` \n\n"
--- a/README.md
+++ b/README.md
@ -1,22 +1,23 @@
 # Mikrotik RouterOS automatic backup and update

-This script allows you to generate daily backups of MikroTik and send them to an email address. You can also choose to enable automatic RouterOS upgrades or receive notifications exclusively for new firmware versions.
+This script allows you to generate daily backups of MikroTik and send them to an email address or upload them to an FTP/SFTP server. You can also choose to enable automatic RouterOS upgrades or receive notifications exclusively for new firmware versions.
 > 💡 If you have any ideas about the script or you just want to share your opinion, you are welcome to [Discussions](https://github.com/beeyev/Mikrotik-RouterOS-automatic-backup-and-update/discussions), or you can open an [issue](https://github.com/beeyev/Mikrotik-RouterOS-automatic-backup-and-update/issues) if you found a bug.


 ## Features:
 - Select the script's operational mode according to your specific needs (details provided below). 
 - This script is designed to create full system backups and export configurations. 
+- Choose between email delivery, FTP/SFTP upload, or both for backup storage.
 - Customize the update channel according to your preference. 
 - With automatic updates activated, the script can be set to apply only patch updates for RouterOS. For instance, should the current RouterOS version be v6.43.6, the script will autonomously upgrade to v6.43.7 (a patch update), while avoiding v6.44.0 (a minor update).*
- The script also incorporates vital device details in the email alerts, facilitating easy identification of the necessary backup among several devices. 
- For added security, the script is programmed to stop the automatic update process if it fails to dispatch backups via email. 
+- The script also incorporates vital device details in the notifications, facilitating easy identification of the necessary backup among several devices.
+- For added security, the script is programmed to stop the automatic update process if it fails to dispatch backups.
 - Routerboard firmware can be upgraded automatically based on the installed RouterOS version.

 ## Script operating modes:
- **Backups only** - The script generates system and configuration backups and forwards them to a specified email as attachments. It uses your email account as a storage for these backups.  
- **Backups and notifications about new RouterOS release** -  In addition to creating backups, the script also monitors for any new releases of RouterOS firmware and communicates this information via email.  
- **Backups and automatic RouterOS upgrade** - The script begins by creating a backup, followed by a check for any new versions of RouterOS. If a newer firmware version is detected, the script initiates the upgrade process. Upon completion, two emails are sent: the first includes the system backups from the prior RouterOS version, and the second, sent post-upgrade, contains backups of the updated system.
+- **Backups only** - The script generates system and configuration backups and sends them via email or uploads them to an FTP/SFTP server. It uses your email account or FTP/SFTP server as storage for these backups.
+- **Backups and notifications about new RouterOS release** -  In addition to creating backups, the script also monitors for any new releases of RouterOS firmware and communicates this information via email (if email is configured).
+- **Backups and automatic RouterOS upgrade** - The script begins by creating a backup, followed by a check for any new versions of RouterOS. If a newer firmware version is detected, the script initiates the upgrade process. Upon completion, two notifications are sent: the first includes the system backups from the prior RouterOS version, and the second, sent post-upgrade, contains backups of the updated system.

 ## How to use
 > ❗️ **Important**  
@ -25,7 +26,12 @@ This script allows you to generate daily backups of MikroTik and send them to an
 ##### 1. Configure parameters
 Take the  [script](https://github.com/beeyev/Mikrotik-RouterOS-automatic-backup-and-update/raw/master/BackupAndUpdate.rsc) and configure it's parameters at the beginning of the file.  
 This step is straightforward as all parameters are well-commented.  
-**Important!** Don't forget to provide correct email address for backups and pay attention to `scriptMode` variable.
+**Important!** Pay attention to `scriptMode` and `backupTransport` variables.
+
+**Backup Transport Options:**
+- `{"email"}` - Send backups via email (default, requires email configuration)
+- `{"ftp"}` - Upload backups to FTP/SFTP server (requires FTP URL configuration)
+- `{"email";"ftp"}` - Use both methods (array with multiple values)

 ##### 2. Create new script
 > In this example we use [WinBox](https://mikrotik.com/download/winbox)  
@ -36,7 +42,9 @@ Go to: `System` -> `Scripts` and click  the `[New]` button.
 Insert the script which you configured earlier into the source area.  
 ![](https://github.com/beeyev/Mikrotik-RouterOS-automatic-backup-and-update/raw/master/howto/script-name.png)  

-##### 3. Configure mail server
+##### 3. Configure backup transport
+
+**Option A: Email (default)**
 Go to: `Tools` -> `Email` and click  the `[New]` button.  
 Configure your email server parameters. If you don't have one, i recommend using the [smtp2go.com](https://smtp2go.com "smtp2go.com") service, which allows sending a thousand emails per month for free.  
 ![](https://github.com/beeyev/Mikrotik-RouterOS-automatic-backup-and-update/raw/master/howto/email-config.png)  
@ -46,6 +54,61 @@ To check email settings, send a test message by running the following command in
 /tool e-mail send to="yourMail@example.com" subject="backup & update test!" body="It works!";
 ```

+**Option B: FTP/SFTP Upload**
+Configure an FTP or SFTP server to receive the backup files. Most NAS devices have built-in FTP/SFTP servers, or you can enable SSH on any Linux server (SFTP is included with SSH).
+
+**Script configuration for FTP:**
+```rsc
+:local backupTransport {"ftp"}
+:local backupFtpUrl "ftp://192.168.1.10"
+:local backupFtpPath "/backups/"
+:local backupFtpUser "backup-user"
+:local backupFtpPassword "secure-password"
+
+# Optional: Configure email for error notifications even when using FTP for backups
+:local emailAddress "admin@example.com"
+```
+
+**Script configuration for SFTP:**
+```rsc
+:local backupTransport {"ftp"}
+:local backupFtpUrl "sftp://192.168.1.10"
+:local backupFtpPath "/home/backup/"
+:local backupFtpUser "backup-user"
+:local backupFtpPassword "secure-password"
+```
+
+**Configuration notes:**
+- `backupFtpUrl`: Server address only (no path). Use `ftp://` or `sftp://` scheme.
+- `backupFtpPath`: Remote directory path. Must start and end with `/`.
+  - Supports `%identity%` placeholder for device-specific directories.
+  - Example: `"/backups/%identity%/"` expands to `"/backups/myrouter/"`
+  - **Important**: The directory must exist on the FTP/SFTP server before first upload.
+- Both FTP and SFTP are supported via the URL scheme.
+- **Error notifications**: If `emailAddress` is configured, error notifications will be sent via email even when using FTP-only for backups. This is recommended for monitoring update failures.
+
+**Example with per-device directories:**
+```rsc
+:local backupFtpPath "/backups/%identity%/"
+```
+This creates separate directories for each device based on its identity name.
+
+**Setting up directories:**
+When using `%identity%` placeholder, you'll need to create the directories on your FTP/SFTP server before the first backup runs. For example, if you have devices named `hEX`, `Office-Switch`, and `Gateway`:
+```bash
+# On your FTP/SFTP server:
+mkdir -p /backups/hEX
+mkdir -p /backups/Office-Switch
+mkdir -p /backups/Gateway
+```
+
+Or run the script once on each device to see the expanded path in the logs, then create those directories.
+
+**Testing FTP/SFTP upload:**
+```bash
+/tool fetch url="ftp://192.168.1.10" upload=yes src-path="somefile.txt" dst-path="/backups/test.txt" user="backup-user" password="secure-password"
+```
+
 ##### 4. Create scheduled task
 Go to: `System` -> `Scheduler` and click the `[Add]` button.  
 Name: `Backup And Update`  
@ -61,7 +124,14 @@ Or you can use this command to create the task:
 ##### 5. Test the script
 Once everything is set up, it's important to verify that the script is functioning properly. 
 To do this, open a New Terminal and a Log window in your WinBox, then manually execute the script by typing `/system script run BackupAndUpdate;` in the Terminal.
-You will see the script the script's operation in the log window. If the script completes without any errors, check your email. You'll find a new message with backups from your MikroTik awaiting you. 🎉
+You will see the script's operation in the log window. If the script completes without any errors:
+- **Email transport**: Check your email for a new message with backups from your MikroTik. 🎉
+- **FTP transport**: Check your FTP/SFTP server directory for the backup files.
+- **Both**: Verify both locations.
+
+
+
+

 ## Acknowledgements
 I would like to extend my sincere gratitude to the following individuals who have contributed to this project: