diff --git a/CHANGES b/CHANGES
index 086b97262..1c8bcc000 100644
--- a/CHANGES
+++ b/CHANGES
@@ -2903,4 +2903,5 @@
 * mail: add ipv6 rdns check
 * mail: disable OCR in tika. this is too slow
 * mail: rebuild index script
+* backups: add preserve attributes checkbox
 
diff --git a/dashboard/public/translation/en.json b/dashboard/public/translation/en.json
index e76735064..4824b7e96 100644
--- a/dashboard/public/translation/en.json
+++ b/dashboard/public/translation/en.json
@@ -629,7 +629,8 @@
             "cifsSealSupport": "Use seal encryption. Requires at least SMB v3",
             "chown": "Remote file system supports chown",
             "encryptedFilenames": "Encrypted filenames",
-            "encryptFilenames": "Encrypt Filenames"
+            "encryptFilenames": "Encrypt Filenames",
+            "preserveAttributesLabel": "Preserve file attributes"
         },
         "check": {
             "noop": "Cloudron backups are disabled. Please ensure this server is backed up using alternate means. See https://docs.cloudron.io/backups/#storage-providers for more information.",
diff --git a/dashboard/public/translation/nl.json b/dashboard/public/translation/nl.json
index f4c056dd4..564e83ef6 100644
--- a/dashboard/public/translation/nl.json
+++ b/dashboard/public/translation/nl.json
@@ -1502,7 +1502,8 @@
             "certificateRenewalFailed": "Vernieuwen certificaten mislukt",
             "appOutOfMemory": "App had te weinig geheugen",
             "appUp": "App is offline",
-            "appDown": "App werkt niet"
+            "appDown": "App werkt niet",
+            "rebootRequired": "Server herstart noodzakelijk"
         },
         "settingsDialog": {
             "description": "Beheer hier je persoonlijke notificatie -instellingen. Cloudron zal een e-mail versturen voor de geselecteerde gebeurtenissen naar je primaire e-mailadres."
diff --git a/dashboard/public/views/backups.html b/dashboard/public/views/backups.html
index 23fde7687..049ad9a20 100644
--- a/dashboard/public/views/backups.html
+++ b/dashboard/public/views/backups.html
@@ -256,6 +256,13 @@
             </label>
           </div>
 
+          <!-- CIFS/mountpoint -->
+          <div class="checkbox" ng-show="configureBackup.provider === 'mountpoint' || configureBackup.provider === 'cifs'">
+            <label>
+              <input type="checkbox" ng-model="configureBackup.preserveAttributes">{{ 'backups.configureBackupStorage.preserveAttributesLabel' | tr }}</input>
+            </label>
+          </div>
+
           <!-- mountpoint -->
           <div class="checkbox" ng-show="configureBackup.provider === 'mountpoint'">
             <label>
diff --git a/dashboard/public/views/backups.js b/dashboard/public/views/backups.js
index 388bebfa1..bd5bcd4e1 100644
--- a/dashboard/public/views/backups.js
+++ b/dashboard/public/views/backups.js
@@ -695,6 +695,9 @@ angular.module('Application').controller('BackupsController', ['$scope', '$locat
         downloadConcurrency: '',
         syncConcurrency: '', // sort of similar to upload
 
+        noHardlinks: false,
+        preserveAttributes: true,
+
         blockDevices: [],
         disk: null,
         mountOptions: {
@@ -764,6 +767,7 @@ angular.module('Application').controller('BackupsController', ['$scope', '$locat
             $scope.configureBackup.format = $scope.backupConfig.format;
             $scope.configureBackup.acceptSelfSignedCerts = !!$scope.backupConfig.acceptSelfSignedCerts;
             $scope.configureBackup.useHardlinks = !$scope.backupConfig.noHardlinks;
+            $scope.configureBackup.preserveAttributes = !!$scope.backupConfig.preserveAttributes;
             $scope.configureBackup.chown = $scope.backupConfig.chown;
 
             const limits = $scope.backupConfig.limits || {};
@@ -916,21 +920,25 @@ angular.module('Application').controller('BackupsController', ['$scope', '$locat
                         backupConfig.mountOptions.username = $scope.configureBackup.mountOptions.username;
                         backupConfig.mountOptions.password = $scope.configureBackup.mountOptions.password;
                         backupConfig.mountOptions.seal = $scope.configureBackup.mountOptions.seal;
+                        backupConfig.preserveAttributes = $scope.configureBackup.preserveAttributes;
                     } else if (backupConfig.provider === 'sshfs') {
                         backupConfig.mountOptions.user = $scope.configureBackup.mountOptions.user;
                         backupConfig.mountOptions.port = $scope.configureBackup.mountOptions.port;
                         backupConfig.mountOptions.privateKey = $scope.configureBackup.mountOptions.privateKey;
+                        backupConfig.preserveAttributes = true;
                     }
                 } else if (backupConfig.provider === 'ext4' || backupConfig.provider === 'xfs' || backupConfig.provider === 'disk') {
                     backupConfig.mountOptions.diskPath = $scope.configureBackup.mountOptions.diskPath;
+                    backupConfig.preserveAttributes = true;
                 } else if (backupConfig.provider === 'mountpoint') {
                     backupConfig.mountPoint = $scope.configureBackup.mountPoint;
                     backupConfig.chown = $scope.configureBackup.chown;
-                    backupConfig.preserveAttributes = true;
+                    backupConfig.preserveAttributes = $scope.configureBackup.preserveAttributes;
                 }
             } else if (backupConfig.provider === 'filesystem') {
                 backupConfig.backupFolder = $scope.configureBackup.backupFolder;
                 backupConfig.noHardlinks = !$scope.configureBackup.useHardlinks;
+                backupConfig.preserveAttributes = true;
             }
 
             if (backupConfig.format === 'rsync') {
diff --git a/src/storage/filesystem.js b/src/storage/filesystem.js
index 7df81e395..2769981aa 100644
--- a/src/storage/filesystem.js
+++ b/src/storage/filesystem.js
@@ -219,6 +219,7 @@ async function testConfig(apiConfig) {
 
     if ('noHardlinks' in apiConfig && typeof apiConfig.noHardlinks !== 'boolean') throw new BoxError(BoxError.BAD_FIELD, 'noHardlinks must be boolean');
     if ('chown' in apiConfig && typeof apiConfig.chown !== 'boolean') throw new BoxError(BoxError.BAD_FIELD, 'chown must be boolean');
+    if ('preserveAttributes' in apiConfig && typeof apiConfig.preserveAttributes !== 'boolean') throw new BoxError(BoxError.BAD_FIELD, 'preserveAttributes must be boolean');
 
     let rootPath; // for managed mounts, this uses 'mountPath', which could be some temporary mount location
     if (apiConfig.provider === PROVIDER_FILESYSTEM) {