diff --git a/config/docker-compose.yml b/config/docker-compose.yml
index 4999bba..77be605 100644
--- a/config/docker-compose.yml
+++ b/config/docker-compose.yml
@@ -1,6 +1,7 @@
 volumes:
   etc_wireguard:
   etc_certs:
+  backup_data:
   # save certifcate
   etc_acme:
 
@@ -85,6 +86,18 @@ services:
 #     expose:
 #       - "8008"
 
+  volume-backup:
+    image: offen/docker-volume-backup
+    environment:
+      BACKUP_NAME: etc_wireguard
+      BACKUP_CRON_EXPRESSION: "0 3 * * *"
+      S3_BUCKET: ${AWS}
+      S3_ENDPOINT: ${ENDPOINT}
+      AWS_ACCESS_KEY_ID: ${AWS_ACCESS_KEY_ID}
+      AWS_SECRET_ACCESS_KEY: ${AWS_SECRET_ACCESS_KEY}
+    volumes:
+      - etc_wireguard:/backup:ro
+      - backup_data:/archive
 
 networks:
   network-container:
diff --git a/scripts/docker-compose.sh b/scripts/docker-compose.sh
index 48d1f64..dc47882 100644
--- a/scripts/docker-compose.sh
+++ b/scripts/docker-compose.sh
@@ -18,6 +18,9 @@ if [[ "--install" == $INSTALLED ]]; then
 
     source /etc/serverconfig/.env
 
+    export AWS_ACCESS_KEY=$(aws configure get aws_access_key_id)
+    export AWS_SECRET_ACCESS_KEY=$(aws configure get aws_secret_access_key)
+
     if [[ -f "$ETC_DIR/docker-compose.yml" ]]; then
         docker compose -f "$ETC_DIR/docker-compose.yml" up -d && \
         info_print "$ETC_DIR/docker-compose.yml is running." 6;