Hello,
I am looking for recommendations for a service provider of immutable backup that has options for a homelab user.
My research has led me to services with expensive options, or no pricing at all unless you ask for a quote.
Thank you
Restic or Borg on your side, a safe and remote destination on the other side.
use restic, with backrest web GUI, and cannot be happier.
As for remote site, I use a remote machine I rent, but there are plenty of providers around, shop a bit… Or find a friend for reciprocal backup?
My plan is to build a second server that I will leave at my inlaws’ house and use that, but for now, I will rent a cloud while this happens.
Thats perfect
How immutable do you need?
S3 offers a flag that prevents modification or deletion for a set period, and afaik basically every S3-compatible provider offers that.
I use that along with a lifecycle rule to maintain my backup buckets on iDrive.
If you need a ‘you cannot touch this and the provider has no way of allowing it’ then you’re talking specialized corporate talk-to-a-sales-person-for-a-quote, as you found out.
Edit: if you don’t need cloud, there’s options for WORM media from the humble BluRay to fancy SSDs that don’t allow deletion.
My goal is that if for whatever reason, my homelab is compromised, I will be able to at least restore my important data.
If i can modify the data on the other end, but cannot from my proxmox, then its fine.
I would like a offsite solution in the future, but for now it’s going to be a cloud for data blob only.
Borg backup?
Never heard of it, but I will look into it. Thanks
Borg append only seems like the way to do this easily
restic can run append-only, too. It’s more about the remote not allowing deletions.
I use Backblaze B2, but stored in an encrypted Restic container, set up using this guide:
Restic has been great for automating backups, and even letting me mount the encrypted storage to grab individual files. I like doing it this way since I don’t have to trust Backblaze isn’t reading my data - I know for sure that they can’t.
Performance of storage that is both remote and encrypted is about what you would expect, but I don’t need access to the data unless something bad happens.