The HTTP call to http://YOUR_GITBUCKET/database/backup to create the backup should be POST only, not GET since the remote system is "changing".

Also it should really besecured for admins only, e.g. at least with a Token, so that it can be used with curl or wget.

Thank you.