The original post: /r/datahoarder by /u/AlgolEscapipe on 2024-10-13 00:50:58.
So, I'm trying to get an actual backup solution going for my Unraid NAS and have hit a snag. My plan is to make local backups on a different disk (in case of disk failure) and also remote backups in case of like, an apartment fire, natural disaster, theft, etc. I want to have the backups encrypted so that I don't have to worry about "trusting" the cloud provider. My actual threat model is not particularly dire, nor is anything I'm storing illegal (personal photos, backup of my main PC's documents folder, backups of Unraid appdata, etc.), but my plan is to make remote backups on both Backblaze B2 as well as a VPS that I rent, possibly OneDrive as well (we have the family 365 plan but don't use all 6 accounts).
I already have the local backups running at various times, and I have the log folder remotely backed up now, but the log folder is small so any encryption/uploading is fast. When I start remotely backing up bigger folders, ranging from 10s of GBs to upwards of 1 or 2 TBs, the time will matter more. So my question is, should I encrypt the local backup, then just copy that over to the remote storage? Or should the local backup be a separate copy, and the remote backup be a separate encryption that backs up directly to the cloud provider?
I'm using Duplicacy atm, so I have each a local and a BackBlaze storage. My one schedule backs up and encrypts all of the shares locally, then a separate schedule backs up and encrypts just the syslogs share and puts it on BackBlaze. Should I do this same thing with my other shares, or would it be better to use the Copy function to just copy the local backup to BackBlaze instead? I can't figure out what best practice is, and even writing this out, I feel like it's not super coherent, lol, so hopefully someone knows what I mean.
Thanks in advance!