Croquette

Immutable backup for important data

https://sh.itjust.works/post/23032489

Immutable backup for important data - sh.itjust.works

Hello, I am looking for recommendations for a service provider of immutable backup that has options for a homelab user. My research has led me to services with expensive options, or no pricing at all unless you ask for a quote. Thank you

Jul 31, 2024 at 6:28pmWeb
Show threadTaasz/WoofJul 31, 2024
www.backblaze.com/docs/cloud-storage-object-lock
Cloud Storage Object Lock

To protect stored data, the Object Lock feature lets you make data immutable by preventing a file from being changed or deleted until a given date.

Show threadCroquetteJul 31, 2024
Thanks for the information, I will look into that.
Show threadexplore_broadenJul 31, 2024
I use backblaze storage with Kopia, which supports using object lock. Every time a backup is made the objects for it are locked for a configurable amount of time. I use 30 days, so an attacker would have to compromise my backup software for a month before being able to erase my backups.
Kopia

Fast and Secure Open-Source Backup Software for Windows, Mac, and Linux

Show threadCroquetteJul 31, 2024
I like the thought of having timed backups to keep the costs lower by pruning the olds backups.
Show threadexplore_broadenAug 1, 2024
Also only differences are stored, so if your files don’t change much each backup costs very little. I keep hundreds of backups for the previous year of changes, and it uses less than double the amount of storage the files take up. You can also enable compression, which I do, so it’s even smaller.
Show threadubergeek77Jul 31, 2024

I use Backblaze B2, but stored in an encrypted Restic container, set up using this guide:

helgeklein.com/…/restic-encrypted-offsite-backup-…

Restic has been great for automating backups, and even letting me mount the encrypted storage to grab individual files. I like doing it this way since I don’t have to trust Backblaze isn’t reading my data - I know for sure that they can’t.

Performance of storage that is both remote and encrypted is about what you would expect, but I don’t need access to the data unless something bad happens.

restic: Encrypted Offsite Backup With Ransomware Protection for Your Homeserver • Helge Klein

This article explains how to set up restic (with the resticprofile wrapper) for automated scheduled backups of your home server.

Helge Klein
Show threadCroquetteJul 31, 2024
Thats a great link, it lists a lot of options and gives a good explanation on how to setup the author’s choices.
Show threadnarc0tic_birdJul 31, 2024
BorgBase allows for append-only backups.
BorgBase - Simple and Secure Hosting for your Borg and Restic Repositories

Simple and Secure Hosting for your Borg and Restic Repositories. From $2/month or $5/TB/month.

BorgBase - Simple and Secure Backup Hosting
Show threadCroquetteJul 31, 2024
Thanks, from another link in this thread, Borg seems to have wrapper options as a complement to its features.
Show threadtalkingpumpkinAug 1, 2024

How much data are we talking about?

A free mega.nz account should be fine for everything except family fotos and legally obtained music/movies.

Show threadCroquetteAug 1, 2024
Photos was part of my plan, so mega.nz isn’t an option. Thanks for the suggestion though.
Show threadShimitarAug 2, 2024

Restic or Borg on your side, a safe and remote destination on the other side.

use restic, with backrest web GUI, and cannot be happier.

As for remote site, I use a remote machine I rent, but there are plenty of providers around, shop a bit… Or find a friend for reciprocal backup?

Show threadCroquetteAug 2, 2024
My plan is to build a second server that I will leave at my inlaws’ house and use that, but for now, I will rent a cloud while this happens.
Show threadShimitarAug 2, 2024
Thats perfect