Me

  • 20 Posts
  • 385 Comments
Joined 2 years ago
cake
Cake day: April 29th, 2023

help-circle


  • Sorry third post. Trying to summarize.

    1. Get external access. Either via port-forward (you lucky American) or via VPS+ssh-tunnel or VPS+wireguard. Stay away from an hard dependency like tailscale and cloudflare (my personal opinion).

    2. Setup a reverse proxy with SSL certs via let’s Encrypt (don’t go wildcard, no need to, just add complexity)

    That’s the concept, implementation requires clearly extra steps…

    See my wiki (https://wiki.gardiol.org/). O describe both the simple and the complex solution. But to be honest, the complex solution is not fully described yet.








  • First copy on offline USB disk on my server itself. Disk is turned on, backup done, disk goes off. Once a day.

    Second copy on a USB drive connected to an OpenWRT router of my home, the furthest away from the server (in case of fire, I could be able to grab either of the two).

    Third copy offsite on a VPS.

    I use restic & backrest with great satisfaction.