48
What sort of setup would you have for secure file storage on a VPS? (lemmy.blahaj.zone)
submitted 3 days ago by AlThePilcrow@lemmy.blahaj.zone to c/selfhosted@lemmy.world
10 comments fedilink hide all child comments

Purely a hypothetical for me; I don't have the means for a VPS or that many files. But in the future, if I'd want to use the 3-2-1 rule with a VPS subscription, what sort of software would I need to ensure that my files can't be accessed on the VPS and need off-site decryption keys? What kind of setup would allow you to access said files from a different device if the decryption keys are stored locally on it? People who've done something similar, how has that gone for you?

top 10 comments
sorted by: hot top new old
[-] HelloRoot@lemy.lol 22 points 2 days ago* (last edited 2 days ago)

https://www.borgbackup.org/

Not only does borg have strong encryption, it also has git-like incrimental versioning and insanely good compression and de-duplication.

For example, I backup my whole 700GB OS drive (personal data + the whole linux OS install with all my tweaks and configs) - I set it to keep the last 15 "snapshots" (7 daily, 4 weekly, 3 monthly, 1 yearly) and all it takes on the borg server is 800GB.

I like using borgmatic for automatic borg backups, but it's optional.

[-] Zachariah@lemmy.world 6 points 2 days ago

If you like a GUI, Vorta is great.

[-] Kirk@startrek.website 2 points 2 days ago

What are you paying for 800gb?

[-] Appoxo@lemmy.dbzer0.com 1 points 2 days ago* (last edited 2 days ago)

Backing up linux is cheating as it can be compressed heavily.
I can backup my whole linux install on Veeam Backup and Replication about 2-3x for the full backup on optimal.

[-] instantregret@lemmy.world 14 points 2 days ago

Restic is incredible fast and encrypted.

[-] Cyber@feddit.uk 4 points 2 days ago* (last edited 2 days ago)

This is the way

@AlThePilcrow@lemmy.blahaj.zone I'm using restic to backup my NAS to a Hetzner storage box. (1TB for ~€3/month)

It's easy, and you can SSH into the box to verify what's actually there.

[-] Jason2357@lemmy.ca 2 points 1 day ago

Restic's dedupe is very good. I used to take uncompressed tars of whole systems and it would add only megabytes to the storage repo each time. Almost everything got deduped despite being in various tar files and very fast.

[-] curbstickle_lw@lemmy.world 17 points 2 days ago

rclone crypt

[-] BevsDad@lemmy.ca 5 points 2 days ago

This using object storage duplicated on two separate services.

[-] hendrik@palaver.p3x.de 6 points 2 days ago* (last edited 2 days ago)

I think a lot of backup programs offer encrypted backups. You enable that and it gets encrypted before being transferred to the remote machine.

this post was submitted on 13 Sep 2026
48 points (96.2% liked)

Selfhosted

62139 readers
556 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
ayyy@sh.itjust.works
curbstickle@anarchist.nexus
curbstickle_lw@lemmy.world