Encrypted offsite backup solution?

trexos

Hi!

I use an encrypted VPS as Nextcloud server for storing and accessing my files. As I don't want to keep all my (important) files on only one system I thought about creating offsite backups to a few OpenVZ servers I have laying around. But I don't want to store my files unencrypted on an OpenVZ instance as the host would be able to access all my documents, therefore I'm looking for a solution to store them encrypted. Currently I'm using an encrypted archive which I rsync to these OpenVZ servers. Obviously, the problem with that method is that during the process of creating the archive I need double the disk space. Is there a better way to realize that? I already found cryptomator, but they don't have a CLI yet

Thanks!

rm_

http://duplicity.nongnu.org/

gol3m

encfs has a reverse mode I think, meaning it creates a folder that shows your files as encrypted and - when you read from it - encrypts the files on the fly.

Nextcloud has encryption, too. Default is a server wide key, meaning any cloud storage you place your files in cannot decrypt them (obviously make sure not to upload the server encryption key by accident).

User-based encryption creates an individual encryption key for each user and protects it with the user's password.

Bochi

Sounds like a perfect use case for borg: https://www.borgbackup.org/
I am using in a similiar setup and it performs very well in terms of reliability and deduplication.

beagle

+1 for Borg.

I used theses scripts as basis to roll my own scripts:

https://github.com/whisperdancer/nextcloud-backup-restore

mfs

borgbackup is the final destination.

agonyzt

If you want a fancy UI, Duplicati works well too!

caracal

rclone works well if you’re already using rsync

SpryServers_Tab

We use Duplicati to backup to Blackblaze b2 for our encrypted Nextcloud backups. Nice, simple UI, simple set up. Set it and forget it really.

SpryServers_Tab

As an FYI, you can backup to ftp/sftp, and many other mediums as well.