this post was submitted on 10 May 2025
95 points (98.0% liked)

Selfhosted

46672 readers
374 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 2 years ago
MODERATORS
 

I'm planning on setting up a nas/home server (primarily storage with some jellyfin and nextcloud and such mixed in) and since it is primarily for data storage I'd like to follow the data preservation rules of 3-2-1 backups. 3 copies on 2 mediums with 1 offsite - well actually I'm more trying to go for a 2-1 with 2 copies and one offsite, but that's besides the point. Now I'm wondering how to do the offsite backup properly.

My main goal would be to have an automatic system that does full system backups at a reasonable rate (I assume daily would be a bit much considering it's gonna be a few TB worth of HDDs which aren't exactly fast, but maybe weekly?) and then have 2-3 of those backups offsite at once as a sort of version control, if possible.

This has two components, the local upload system and the offsite storage provider. First the local system:

What is good software to encrypt the data before/while it's uploaded?

While I'd preferably upload the data to a provider I trust, accidents happen, and since they don't need to access the data, I'd prefer them not being able to, maliciously or not, so what is a good way to encrypt the data before it leaves my system?

What is a good way to upload the data?

After it has been encrypted, it needs to be sent. Is there any good software that can upload backups automatically on regular intervals? Maybe something that also handles the encryption part on the way?

Then there's the offsite storage provider. Personally I'd appreciate as many suggestions as possible, as there is of course no one size fits all, so if you've got good experiences with any, please do send their names. I'm basically just looking for network attached drives. I send my data to them, I leave it there and trust it stays there, and in case too many drives in my system fail for RAID-Z to handle, so 2, I'd like to be able to get the data off there after I've replaced my drives. That's all I really need from them.

For reference, this is gonna be my first NAS/Server/Anything of this sort. I realize it's mostly a regular computer and am familiar enough with Linux, so I can handle that basic stuff, but for the things you wouldn't do with a normal computer I am quite unfamiliar, so if any questions here seem dumb, I apologize. Thank you in advance for any information!

top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 3 points 3 hours ago* (last edited 3 hours ago)

I use asustor Nas, one at my house south east US, one at my sister's house northeast us. The asus os takes care of the backup every night. It's not cheap but if you want it done right.

Both run 4 drives in raid 5. Pictures backup to the hdd and a raid 1 set of nvme in the nas. The rest is just movies and TV shows for plex so I don't really care about those. The pictures are the main thing. I feel like that's as safe I can be.

[–] [email protected] 6 points 4 hours ago (1 children)

I'm just skipping that. How am I going to backup 48TB on an off-site backup?!

[–] [email protected] 1 points 4 hours ago (1 children)

Get a tiny ITX box with a couple 20TB refurbished HDDs, stick it at a friend's house

[–] [email protected] 1 points 3 hours ago* (last edited 3 hours ago) (1 children)

In theory. But I already spent my pension for those 64TB drives (raidz2) xD. Getting off-site backup for all of that feels like such a waste of money (until you regret it). I know it isn't a backup, but I'm praying the Raidz2 will be enough protection.

[–] [email protected] 2 points 2 hours ago

Understanding the risks is half the battle, but we can only do what we can do.

[–] [email protected] 3 points 4 hours ago

Hetzner Storagebox

[–] [email protected] 2 points 4 hours ago (1 children)

I use syncthing to push data offsite encrypted and with staggered versioning, to a tiny ITX box I run at family member's house

[–] [email protected] 3 points 2 hours ago

The best part about sync thing is that you can set it to untrusted at the target. The data all gets encrypted and is not accessible whatsoever and the other side.

[–] [email protected] 3 points 5 hours ago

My dad and I each have Synology NAS. We do a hyper sync backup from one to the other. I back up to his and vice versa. I also use syncthing to backup my plex media so he can mount it locally on his plex server.

[–] [email protected] 10 points 7 hours ago* (last edited 7 hours ago) (1 children)

NAS at the parents’ house. Restic nightly job, with some plumbing scripts to automate it sensibly.

[–] [email protected] 2 points 6 hours ago

This is mine exactly. Mine send to backblaze b2

[–] [email protected] 12 points 7 hours ago (1 children)

There's some really good options in this thread, just remember that whatever you pick. Unless you test your backups, they are as good as not existing.

[–] [email protected] 1 points 4 hours ago

Is there some good automated way of doing that? What would it look like, something that compares hashes?

[–] [email protected] 19 points 8 hours ago (2 children)

Syncthing to a pi at my parents place.

[–] [email protected] 6 points 7 hours ago (2 children)

But doesn’t that sync in real-time? Making it not a true backup?

[–] [email protected] 1 points 1 hour ago

Have it sync the backup files from the -2- part. You can then copy them out of the syncthing folder to a local one with a cron to rotate them. That way you get the sync offsite and you can keep them out of the rotation as long as you want.

[–] [email protected] 5 points 6 hours ago (1 children)

Agreed. I have it configured on a delay and with multiple file versions. I also have another pi running rsnapshot (rsync tool).

[–] [email protected] 1 points 3 hours ago (2 children)
[–] [email protected] 2 points 1 hour ago

For the delay, I just reduce how often it checks for new files instead of instantaneously.

[–] [email protected] 1 points 2 hours ago

Edit the share, enable file versioning, choose which flavor.

[–] [email protected] 8 points 8 hours ago

Low power server in a friends basement running syncthing

[–] [email protected] 2 points 5 hours ago* (last edited 4 hours ago)

I just rsync it once in a while to a home server running in my dad’s house. I want it done manually in a “pull” direction rather than a “push” in case I ever get hit with ransomware.

[–] [email protected] 3 points 5 hours ago (1 children)

Put brand new drive into system, begin clone

When clone is done, pull drive out and place in a cardboard box

Take that box to my off-site storage (neighbors house) and bury it

(In truth I couldn't afford to get to the 1 off-site in time and have potentially tragically lost almost 4TB of data that, while replacable, will take time because I don't fucking remember what I even had lol. Gonna take the drives to a specialist tho cuz I think the plates are fine and it's the actual reading mechanism that's busted)

[–] [email protected] 2 points 5 hours ago* (last edited 5 hours ago)

For this I use a python script run via cron to output an html directory file that lists all the folder contents and pushes it to my cloud storage. This way if I ever have a critical failure of replaceable media, I can just refer to my latest directory file.

[–] [email protected] 22 points 10 hours ago

Cloud is kind of the default these days but given you’re on this community, I’m guessing you want to keep third parties out of it.

Traditionally, at least in the video editing world, we would keep LTO or some other format offsite and pay for housing it or if you have multiple locations available to you just have those drives shipped back-and-forth as they are updated at regular intervals.

I don’t know what you really have access to or what you’re willing to compromise on so it’s kind of hard to answer the question to be honest. Lots of ways to do it

[–] [email protected] 20 points 9 hours ago

I use borg backup. It, and another tool called restic, are meant for creating encrypted backups. Further, it can create backups regularly and only backup differences. This means you could take a daily backup without making new copies of your entire library. They also allow you to, as part of compressing and encrypting, make a backup to a remote machine over ssh. I think you should start with either of those.

One provider thats built for being a cloud backup is borgbase. It can be a location you backup a borg (or restic I think) repository. There are others that are made to be easily accessed with these backup tools.

Lastly, I'll mention that borg handles making a backup, but doesn't handle the scheduling. Borgmatic is another tool that, given a yml configuration file, will perform the borgbackup commands on a schedule with the defined arguments. You could also use something like systemd/cron to run a schedule.

Personally, I use borgbackup configured in NixOS (which makes the systemd units for making daily backups) and I back up to a different computer in my house and to borgbase. I have 3 copies, 1 cloud and 2 in my home.

[–] [email protected] 2 points 6 hours ago

Rclone to dropbox. ( was cheapest for 2tb at the time )

[–] [email protected] 1 points 5 hours ago

Idrive has built in local encryption you can enable.

[–] [email protected] 5 points 7 hours ago (1 children)

so if any questions here seem dumb

Not dumb. I say the same, but I have a severe inferiority complex and imposter syndrome. Most artists do.

1 local backup 1 cloud back up 1 offsite backup to my tiny house at the lake.

I use Synchthing.

[–] [email protected] -4 points 4 hours ago

+1 syncthing

[–] [email protected] 4 points 7 hours ago

I used to say restic and b2; lately, the b2 part has become more iffy, because of scuttlebutt, but for now it's still my offsite and will remain so until and unless the situation resolves unfavorably.

Restic is the core. It supports multiple cloud providers, making configuration and use trivial. It encrypts before sending, so the destination never has access to unencrypted blobs. It does incremental backups, and supports FUSE vfs mounting of backups, making accessing historical versions of individual files extremely easy. It's OSS, and a single binary executable; IMHO it's at the top of its class, commercial or OSS.

B2 has been very good to me, and is a clear winner for this is case: writes and space are pennies a month, and it only gets more expensive if you're doing a lot of reads. The UI is straightforward and easy to use, the API is good; if it weren't for their recent legal and financial drama, I'd still unreservedly recommend them. As it is, you'd have you evaluate it yourself.

[–] [email protected] 6 points 9 hours ago* (last edited 9 hours ago) (2 children)

Next to paying for cloud storage, I know people who store an external hdd at their parent's or with friends. I don't do the whole backup thing for all the recorded TV shows and ripped bluerays... If my house burns down, they're gone. But that makes the amount of data a bit more manageable. And I can replace those. I currently don't have a good strategy. My data is somewhat scattered between my laptop, the NAS, an external hdd which is in a different room but not off-site, one cheap virtual server I pay for and critical things like the password manager are synced to the phone as well. Main thing I'm worried about is one of the mobile devices getting stolen so I focus on having that backed up to the NAS or synced to Nextcloud. But I should work on a solid strategy in case something happens to the NAS.

I don't think the software is a big issue. We got several good backup tools which can do incremental or full backups, schedules, encryption and whatever someone might need for backups.

[–] [email protected] 3 points 7 hours ago (1 children)

It really depends on what your data is and how hard it would be to recreate. I keep a spare HD in a $40/year bank box & rotate it every 3 months. Most of the content is media - pictures, movies, music. Financial records would be annoying to recreate, but if there's a big enough disaster to force me to go to the off-site backups, I think that'll be the least of my troubles. Some data logging has a replica database on a VPS.

My upload speed is terrible, so I don't want to put a media library in the cloud. If I did any important daily content creation, I'd probably keep that mirrored offsite with rsync, but I feel like the spirit of an offsite backup is offline and asynchronous, so things like ransomware don't destroy your backups, too.

[–] [email protected] 2 points 7 hours ago

Sure. With data that might be skipped, I meant something like the Jellyfin server, which probably consists of pirated TV and music or movie rips. Those tend to be huge in size and easy to recreate. With personal content, pictures and videos there is no chance of getting it back. And I'd argue with a lot of documents and data it's not even worth the hassle to decide which might be stored somewhere else, maybe in paper form... Just back them up, storage is cheap and most people don't generate gigabytes worth of content each month. For large data that doesn't change a lot, something like one or two rotated external disks might do it. And for smaller documents and current projects which see a lot of changes, we have things like Nextcloud, Syncthing and a $80 a year VPS or other cloud storage solutions.

[–] [email protected] 3 points 8 hours ago

Yeah me too, photos and videos I've recorded are the only things I'm bothered about. Backing up off-site all my arrrrr booty is redundant since I've shared it to a 2.1 ratio already and hopefully can download it again from people with larger storage than my family member has.

It's how I handle backing up those photos / videos thou. I bought them a 512GB card and shoved that in a GLi AP they have down there which I sync my DCIM folder to (app was removed from Play Store since it didn't need updating but Googles stupid policies meant it went RIP.....), and I also backup that to the old Synology NAS I handed down to them. I suppose I could use Syncthing but I like that old app since the adage if it's not broke don't fix it applies.

Along with them having Tailscale on a Pi4 (on a UPS and is their/my backup TVHeadend server) and their little N100 media box I don't even bother them with my meager photo collection and works good.

[–] [email protected] 7 points 9 hours ago (2 children)

My ratchet way of doing it is Backblaze. There is a docker container that lets you run the unlimited personal plan on Linux by emulating a windows environment. They let you set an encryption key so that they can’t access your data.

I’m sure there are a lot more professional and secure ways to do it, but my way is cheap, easy, and works.

[–] [email protected] 1 points 3 hours ago (1 children)

What's the container's name? I was about to get backblaze and then was frustrated at the cost difference between the desktop personal plan and the one for deploying on my server

[–] [email protected] 3 points 8 hours ago (2 children)

I use backblaze as well, got an link to the docker container - that may save me a few dollar bucks a week and thus keep SWMBO happier

[–] [email protected] 7 points 9 hours ago (2 children)

I rsync a copy of it to a friends house every night. It's straight forward, simple and free.

[–] [email protected] 2 points 6 hours ago

Same


rsync to a pi 3 with a (single) ZFS drive at family's house. Retain some daily/weekly/monthly snapshots.

I have a (free) VPS with static IPv4 which is how I connect everything.

Both the VPS and the remote site have limited network speed (I think 50Mbps for VPS), so the initial sync was done sneakernet (well..."airplane net"). Nightly rsync is no problem bandwidth-wise, and is mostly just any new videos I've uploaded to my local Immich instance.

[–] [email protected] 5 points 9 hours ago

I rsync a copy to mom's

[–] [email protected] 6 points 9 hours ago* (last edited 9 hours ago)

As others have said, use tools like borg and restic.

Shop around for cloud storage with good pricing for your use-case. Many charge for different usage patterns, like restoring data or uploading.

Check out storj.io, I like their pricing - they charge for downloading/restore (IIRC), and I figure that's a cost I can live with if I need to restore.

Otherwise I keep 3 local copies of data:

1 is live, and backed up to storj.io

2 is mirrored from 1 every other week

3 is mirrored from 1 every other week, opposite 2

This works for my use-case, where I'm concerned about local failures and mistakes (and don't trust my local stores enough to use a backup tool), but my data doesn't change a lot in a week. If I were to lose 1 week of changes, it would be a minor issue. And I'm trusting my cloud backup to be good (I do test it quarterly, and do a single file restore test monthly).

This isn't an ideal (or even recommended approach), just works with the storages I currently have, and my level of trust of them.

[–] [email protected] 2 points 7 hours ago

Right now I sneaker net it. I stash a luks encrypted drive in my locker at work and bring it home once a week or so to update the backup.

At some point I'm going to set up a RPI at a friend's house, but that's down the road a bit.

[–] [email protected] 3 points 9 hours ago (2 children)

External drives that I keep in my office at work. Also cloud storage.

load more comments (2 replies)
[–] [email protected] 3 points 9 hours ago

I use rsync.net

It's not the lowest price, but I like the flexibility of access.

For instance, I was able to run rclone on their servers to do a direct copy from OneDrive to rsync.net, 400Gb without having to go through my connection.

I can mount backups with sshfs if I want to, including the daily zfs snapshots.

[–] [email protected] 3 points 9 hours ago* (last edited 9 hours ago)

I have a rpi4 awith an external hdd at my parents house, which I connect via a wireguard vpn, mount and decrypt the external hdd and then it triggers a restic backup to a restic-rest server as append only.

The whole thing is done via a python script

I chose the rest-server because it allows "append only", so the data can't be deleted easily from my side of the vpn.

[–] [email protected] 3 points 9 hours ago* (last edited 9 hours ago)

A huge tape archive in a mountain. It's pretty standard for geophysical data. I have some (encrypted) personal stuff on a few tapes there.

[–] [email protected] 1 points 7 hours ago

I spend my days working on a MacBook, and have several old external USB drives duplicating my important files, live, off my server (Unraid) via Resilio to my MacBook (yes I know syncthing exists, but Resilio is easier). My off-site backups are to a Hetzner Storage Box using Duplicacy which is amazing and supports encrypted snapshots (a cheap GUI alternative to Borgbackup).

So for me, Resilio and Duplicacy.

load more comments
view more: next ›