What sort of setup would you have for secure file storage on a VPS?
Purely a hypothetical for me; I don't have the means for a VPS or that many files. But in the future, if I'd want to use the 3-2-1 rule with a VPS subscription, what sort of software would I need to ensure that my files can't be accessed on the VPS and need off-site decryption keys? What kind of setup would allow you to access said files from a different device if the decryption keys are stored locally on it? People who've done something similar, how has that gone for you?
10 replies
Restic is incredible fast and encrypted.
This is the way
@[email protected] I'm using restic to backup my NAS to a Hetzner storage box. (1TB for ~€3/month)
It's easy, and you can SSH into the box to verify what's actually there.
Restic's dedupe is very good. I used to take uncompressed tars of whole systems and it would add only megabytes to the storage repo each time. Almost everything got deduped despite being in various tar files and very fast.
https://www.borgbackup.org/
Not only does borg have strong encryption, it also has git-like incrimental versioning and insanely good compression and de-duplication.
For example, I backup my whole 700GB OS drive (personal data + the whole linux OS install with all my tweaks and configs) - I set it to keep the last 15 "snapshots" (7 daily, 4 weekly, 3 monthly, 1 yearly) and all it takes on the borg server is 800GB.
I like using borgmatic for automatic borg backups, but it's optional.
Backing up linux is cheating as it can be compressed heavily.
I can backup my whole linux install on Veeam Backup and Replication about 2-3x for the full backup on optimal.
What are you paying for 800gb?
If you like a GUI, Vorta is great.
rclone crypt
This using object storage duplicated on two separate services.
I think a lot of backup programs offer encrypted backups. You enable that and it gets encrypted before being transferred to the remote machine.