27
How secure is my local backup drive with sshfs? (discuss.tchncs.de)
submitted 1 month ago* (last edited 1 month ago) by to c/selfhosted@lemmy.world
22 comments fedilink hide all child comments
 

Hello everyone.

I have been interested in starting to self-host, and I have just been able to set up the first useful thing for myself (apart from a PiHole that I have running).

Since I am very afraid of making security mistakes, I would like to get feedback from you if my setup is secure or not.

The simple use case: I want to be able to back up files from my main computer to a hard disk, without having the hard disk attached to my main computer.

The setup:

  • A Raspberry Pi 4 running Raspberry Pi OS Lite (64-bit).
  • The Raspberry Pi can only be accessed via ed25519 key.
  • I configured a firewall on the Raspberry Pi with ufw to allow only traffic from the local subnet.
  • I then use sshfs to mount the hard disk connected with the Raspberry Pi to my main computer.
  • I plan to use rsync to back up my files.

Now I need your help: how secure is this setup? Did I make any major mistake? Is there something I could do better?

I'd be happy to get some feedback... ๐Ÿ™‚

you are viewing a single comment's thread
view the rest of the comments
[โ€“] 5 points 1 month ago* (last edited 1 month ago) (1 child)

You should be good with caveats:

  • Permissions on: ~/.ssh: chmod 700 ~/.ssh
  • Permissions on private keys: chmod 600 ~/.ssh/id_rsa or id_ed25519, etc.
  • Permissions on public keys: chmod 644 ~/.ssh/id_rsa.pub

You can check with: ls -la ~/.ssh/

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •