19
How secure is my local backup drive with ssfhs? (discuss.tchncs.de)
submitted 12 hours ago by 712@discuss.tchncs.de to c/selfhosted@lemmy.world
19 comments fedilink hide all child comments

Hello everyone.

I have been interested in starting to self-host, and I have just been able to set up the first useful thing for myself (apart from a PiHole that I have running).

Since I am very afraid of making security mistakes, I would like to get feedback from you if my setup is secure or not.

The simple use case: I want to be able to back up files from my main computer to a hard disk, without having the hard disk attached to my main computer.

The setup:

  • A Raspberry Pi 4 running Raspberry Pi OS Lite (64-bit).
  • The Raspberry Pi can only be accessed via ed25519 key.
  • I configured a firewall on the Raspberry Pi with ufw to allow only traffic from the local subnet.
  • I then use sshfs to mount the hard disk connected with the Raspberry Pi to my main computer.
  • I plan to use rsync to back up my files.

Now I need your help: how secure is this setup? Did I make any major mistake? Is there something I could do better?

I'd be happy to get some feedback... 🙂

you are viewing a single comment's thread
view the rest of the comments
[-] Shimitar@downonthestreet.eu 2 points 11 hours ago

It is as secure as it can be.

Are you planning to connect to the server from internet? Are you planning to expose services to the internet?

[-] 712@discuss.tchncs.de 2 points 11 hours ago

Thank you. For now, I won't try to connect to the server from the internet. I want to learn more about VPNs before I try anything like this. I am very paranoid when it comes to security, so I don't want to risk anything... 😄

[-] irmadlad@lemmy.world 6 points 11 hours ago

I am very paranoid when it comes to security, so I don’t want to risk anything… 😄

Don't relax that posture. A little paranoia can be a good thing.

this post was submitted on 02 Jul 2026
19 points (100.0% liked)

Selfhosted

60366 readers
712 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
ayyy@sh.itjust.works
curbstickle@anarchist.nexus
curbstickle_lw@lemmy.world