With restic you can pipe to stdin, so I use mysqldump and pipe it to restic:

mysqldump --defaults-file=/root/backup_scripts/.my.cnf --databases db-name | restic backup --stdin --stdin-filename db-name.sql

The .my.cnf looks like this:

[mysqldump]
user=db-user
password="databasepassword"

School bus tail gunner.

Roll tide.

You can’t dedup/compress restic repos at fs level due to the encryption.

Nice thing is you get those even with „dumb“ targets that can‘t do those for you.

Restic is my tool of choice for deduplicated encrypted verifiable compressed incremental backups.