Hello,

I am looking for recommendations for a service provider of immutable backup that has options for a homelab user.

My research has led me to services with expensive options, or no pricing at all unless you ask for a quote.

Thank you

  • schizo@forum.uncomfortable.businessEnglish
    9·
    3 months ago

    How immutable do you need?

    S3 offers a flag that prevents modification or deletion for a set period, and afaik basically every S3-compatible provider offers that.

    I use that along with a lifecycle rule to maintain my backup buckets on iDrive.

    If you need a ‘you cannot touch this and the provider has no way of allowing it’ then you’re talking specialized corporate talk-to-a-sales-person-for-a-quote, as you found out.

    Edit: if you don’t need cloud, there’s options for WORM media from the humble BluRay to fancy SSDs that don’t allow deletion.

    • Croquette@sh.itjust.worksOPEnglish
      3·
      3 months ago

      My goal is that if for whatever reason, my homelab is compromised, I will be able to at least restore my important data.

      If i can modify the data on the other end, but cannot from my proxmox, then its fine.

      I would like a offsite solution in the future, but for now it’s going to be a cloud for data blob only.

    • Croquette@sh.itjust.worksOPEnglish
      3·
      3 months ago

      Thanks, from another link in this thread, Borg seems to have wrapper options as a complement to its features.

  • ubergeek77@lemmy.ubergeek77.chatEnglish
    7·
    3 months ago

    I use Backblaze B2, but stored in an encrypted Restic container, set up using this guide:

    https://helgeklein.com/blog/restic-encrypted-offsite-backup-with-ransomware-protection-for-your-homeserver/

    Restic has been great for automating backups, and even letting me mount the encrypted storage to grab individual files. I like doing it this way since I don’t have to trust Backblaze isn’t reading my data - I know for sure that they can’t.

    Performance of storage that is both remote and encrypted is about what you would expect, but I don’t need access to the data unless something bad happens.

    • Croquette@sh.itjust.worksOPEnglish
      1·
      3 months ago

      Thats a great link, it lists a lot of options and gives a good explanation on how to setup the author’s choices.

      • explore_broaden@midwest.socialEnglish
        3·
        3 months ago

        I use backblaze storage with Kopia, which supports using object lock. Every time a backup is made the objects for it are locked for a configurable amount of time. I use 30 days, so an attacker would have to compromise my backup software for a month before being able to erase my backups.

          • explore_broaden@midwest.socialEnglish
            2·
            3 months ago

            Also only differences are stored, so if your files don’t change much each backup costs very little. I keep hundreds of backups for the previous year of changes, and it uses less than double the amount of storage the files take up. You can also enable compression, which I do, so it’s even smaller.

  • Shimitar@feddit.itEnglish
    2·
    3 months ago

    Restic or Borg on your side, a safe and remote destination on the other side.

    use restic, with backrest web GUI, and cannot be happier.

    As for remote site, I use a remote machine I rent, but there are plenty of providers around, shop a bit… Or find a friend for reciprocal backup?