diff --git a/inventory/service/host_vars/refstack01.openstack.org.yaml b/inventory/service/host_vars/refstack01.openstack.org.yaml
index 603e104c1b..dce1055974 100644
--- a/inventory/service/host_vars/refstack01.openstack.org.yaml
+++ b/inventory/service/host_vars/refstack01.openstack.org.yaml
@@ -5,3 +5,5 @@ letsencrypt_certs:
 borg_backup_excludes_extra:
   # live db files
   - /var/lib/refstack/db
+  # on-disk backups
+  - /var/backups/refstack-mariadb
diff --git a/playbooks/roles/refstack/tasks/main.yaml b/playbooks/roles/refstack/tasks/main.yaml
index 49b68d97ba..938f28fc8e 100644
--- a/playbooks/roles/refstack/tasks/main.yaml
+++ b/playbooks/roles/refstack/tasks/main.yaml
@@ -150,5 +150,5 @@
       copy:
         content: >-
             /usr/local/bin/docker-compose -f /etc/refstack-docker/docker-compose.yaml exec -T mariadb
-            bash -c '/usr/bin/mysqldump --skip-extended-insert --databases gitea --single-transaction -uroot -p"$MYSQL_ROOT_PASSWORD"'T_PASSWORD"'
+            bash -c '/usr/bin/mysqldump --skip-extended-insert --databases refstack --single-transaction -uroot -p"$MYSQL_ROOT_PASSWORD"'
         dest: /etc/borg-streams/mysql