this post was submitted on 31 Jul 2024

26 points (96.4% liked)

Selfhosted

39167 readers

381 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago

MODERATORS

HybridSarcasm@lemmy.world

HybridSarcasm@lemmy.hybridsarcasm.xyz

Immutable backup for important data (sh.itjust.works)

submitted 1 month ago by Croquette@sh.itjust.works to c/selfhosted@lemmy.world

21 comments fedilink hide all child comments

Hello,

I am looking for recommendations for a service provider of immutable backup that has options for a homelab user.

My research has led me to services with expensive options, or no pricing at all unless you ask for a quote.

Thank you

top 21 comments

sorted by: hot top controversial new old

[–] schizo@forum.uncomfortable.business 11 points 1 month ago* (last edited 1 month ago) (1 children)

How immutable do you need?

S3 offers a flag that prevents modification or deletion for a set period, and afaik basically every S3-compatible provider offers that.

I use that along with a lifecycle rule to maintain my backup buckets on iDrive.

If you need a 'you cannot touch this and the provider has no way of allowing it' then you're talking specialized corporate talk-to-a-sales-person-for-a-quote, as you found out.

Edit: if you don't need cloud, there's options for WORM media from the humble BluRay to fancy SSDs that don't allow deletion.

[–] Croquette@sh.itjust.works 3 points 1 month ago (1 children)

My goal is that if for whatever reason, my homelab is compromised, I will be able to at least restore my important data.

If i can modify the data on the other end, but cannot from my proxmox, then its fine.

I would like a offsite solution in the future, but for now it's going to be a cloud for data blob only.

[–] solrize@lemmy.world 2 points 1 month ago (1 children)

Borg backup?

[–] Croquette@sh.itjust.works 1 points 1 month ago (1 children)

Never heard of it, but I will look into it. Thanks

[–] maxwellfire@lemmy.world 2 points 1 month ago (1 children)

Borg append only seems like the way to do this easily

[–] farcaller@fstab.sh 1 points 1 month ago

restic can run append-only, too. It's more about the remote not allowing deletions.

[–] narc0tic_bird@lemm.ee 9 points 1 month ago (1 children)

BorgBase allows for append-only backups.

[–] Croquette@sh.itjust.works 4 points 1 month ago

Thanks, from another link in this thread, Borg seems to have wrapper options as a complement to its features.

[–] ubergeek77@lemmy.ubergeek77.chat 7 points 1 month ago (1 children)

I use Backblaze B2, but stored in an encrypted Restic container, set up using this guide:

https://helgeklein.com/blog/restic-encrypted-offsite-backup-with-ransomware-protection-for-your-homeserver/

Restic has been great for automating backups, and even letting me mount the encrypted storage to grab individual files. I like doing it this way since I don't have to trust Backblaze isn't reading my data - I know for sure that they can't.

Performance of storage that is both remote and encrypted is about what you would expect, but I don't need access to the data unless something bad happens.

[–] Croquette@sh.itjust.works 1 points 1 month ago

Thats a great link, it lists a lot of options and gives a good explanation on how to setup the author's choices.

[–] MangoPenguin@lemmy.blahaj.zone 3 points 1 month ago* (last edited 1 month ago) (2 children)

Backblaze B2 has the option: https://www.backblaze.com/docs/cloud-storage-object-lock

Cheap storage too.

[–] mhzawadi@lemmy.horwood.cloud 1 points 1 month ago

I use B2 for my backups with object lock on

[–] Croquette@sh.itjust.works 1 points 1 month ago (1 children)

Thanks for the information, I will look into that.

[–] explore_broaden@midwest.social 3 points 1 month ago (1 children)

I use backblaze storage with Kopia, which supports using object lock. Every time a backup is made the objects for it are locked for a configurable amount of time. I use 30 days, so an attacker would have to compromise my backup software for a month before being able to erase my backups.

[–] Croquette@sh.itjust.works 1 points 1 month ago (1 children)

I like the thought of having timed backups to keep the costs lower by pruning the olds backups.

[–] explore_broaden@midwest.social 2 points 1 month ago

Also only differences are stored, so if your files don’t change much each backup costs very little. I keep hundreds of backups for the previous year of changes, and it uses less than double the amount of storage the files take up. You can also enable compression, which I do, so it’s even smaller.

[–] Shimitar@feddit.it 2 points 1 month ago (1 children)

Restic or Borg on your side, a safe and remote destination on the other side.

use restic, with backrest web GUI, and cannot be happier.

As for remote site, I use a remote machine I rent, but there are plenty of providers around, shop a bit... Or find a friend for reciprocal backup?

[–] Croquette@sh.itjust.works 1 points 1 month ago (1 children)

My plan is to build a second server that I will leave at my inlaws' house and use that, but for now, I will rent a cloud while this happens.

[–] Shimitar@feddit.it 1 points 1 month ago

Thats perfect

[–] talkingpumpkin@lemmy.world 2 points 1 month ago (1 children)

How much data are we talking about?

A free mega.nz account should be fine for everything except family fotos and legally obtained music/movies.

[–] Croquette@sh.itjust.works 1 points 1 month ago

Photos was part of my plan, so mega.nz isn't an option. Thanks for the suggestion though.