Secure Offsite Backups: Verification & Hardening
Goal: Validate and harden the Restic + SFTP + WireGuard backup architecture.
#sftp #wireguard #hardening #restic
https://medium.com/@nyb.an/secure-offsite-backups-verification-hardening-f70daf1214c7
Jetzt habe ich #CryptPad installiert (per Docker, auf meinen kleinen 2 CPU / 2 GB #ionos Mietserver, der mein #Headscale VPN macht), weiß aber immer noch nicht, was ich eigentlich damit will.
Vielleicht Einkaufsliste, aber dafür fehlt eine praktische, mobile App (gibt wohl gar keine Third-Party-Clients).
Vielleicht die Datei mit den Stromzählerständen von Apple Numbers umziehen?
Vorher aber erstmal ein Backup einrichten (in existierendes #Restic einbinden; SFTP zu #Hetzner Storagebox).
Secure Offsite Backups: Verification & Hardening
Goal: Validate and harden the Restic + SFTP + WireGuard backup architecture.
#sftp #wireguard #hardening #restic
https://medium.com/@nyb.an/secure-offsite-backups-verification-hardening-f70daf1214c7
Secure Offsite Backups: Restic + SFTP over WireGuard.
Goal: Build a resilient, encrypted, and isolated backup system that survives total server failure.
#sftp #WireGuard #proxmox #restic
https://medium.com/@nyb.an/secure-offsite-backups-restic-sftp-over-wireguard-2eae5f5882de
Se hai un VPS / Server Linux e non hai ancora impostato dei backup automatici, questa potrebbe esserti utile:
Backup con Restic e rclone, guida passo passo, con approccio pratico e semplice da replicare.
🔗 https://www.risposteinformatiche.it/backup-automatici-vps-linux-restic-rclone/
One thing I want to figure out and build in a robust way is how to verify backups on NixOS via the restic module.
The secret management with sops-nix and per-host backup and restore logic to an append-only server is working. It just needs automatic testing, better notifications, and better insight.
The current idea is to spin up randomly and automatically a new NixOS host, configuring it as one of the others, and verifying if everything is restored correctly.
Den heutigen Tag ernenne ich zum Tag des Backups. Gefühlt habe ich mich nur um Backups in verschiedenen Szenarien gekümmert.
1. Windows Server Backup mit #VSS
2. #Veeam für Hyper-V
3. Skript für #restic angepasst
4. Mit #Powershell für einen Updatedienst herumgespielt
#Restore mache ich dann morgen. 😉
I use restic for backups. Great but it is cumbersome to build up some regular update strategy around that. However there is a create tool resticprofile. https://creativeprojects.github.io/resticprofile/index.html, to close that gap. One can schedule backups for example via Systemd Timers. This tool is even mentioned in the official docs of restic itself, https://restic.readthedocs.io/en/stable/040_backup.html#scheduling-backups.
One caveat it has no packages in the official Linux distributions.
However it has build binaries on github.
New blog post!
I finally started writing about my home lab. This post is about how I back up data using restic.
Full story: https://britter.dev/blog/2026/04/10/home-lab-backup-with-restic/