New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Encrypted offsite backup solution?
Hi!
I use an encrypted VPS as Nextcloud server for storing and accessing my files. As I don't want to keep all my (important) files on only one system I thought about creating offsite backups to a few OpenVZ servers I have laying around. But I don't want to store my files unencrypted on an OpenVZ instance as the host would be able to access all my documents, therefore I'm looking for a solution to store them encrypted. Currently I'm using an encrypted archive which I rsync to these OpenVZ servers. Obviously, the problem with that method is that during the process of creating the archive I need double the disk space. Is there a better way to realize that? I already found cryptomator, but they don't have a CLI yet 
Thanks!
Thanked by 1Ympker
Comments
http://duplicity.nongnu.org/
encfs has a reverse mode I think, meaning it creates a folder that shows your files as encrypted and - when you read from it - encrypts the files on the fly.
Nextcloud has encryption, too. Default is a server wide key, meaning any cloud storage you place your files in cannot decrypt them (obviously make sure not to upload the server encryption key by accident).
User-based encryption creates an individual encryption key for each user and protects it with the user's password.
Sounds like a perfect use case for borg: https://www.borgbackup.org/
I am using in a similiar setup and it performs very well in terms of reliability and deduplication.
+1 for Borg.
I used theses scripts as basis to roll my own scripts:
https://github.com/whisperdancer/nextcloud-backup-restore
borgbackup is the final destination.
If you want a fancy UI, Duplicati works well too!
rclone works well if you’re already using rsync
We use Duplicati to backup to Blackblaze b2 for our encrypted Nextcloud backups. Nice, simple UI, simple set up. Set it and forget it really.
As an FYI, you can backup to ftp/sftp, and many other mediums as well.