Automate offsite backup: restic copy to an append-only rest-server on the VPS #125

New issue

Open

opened 2026-08-17 17:49:56 -04:00 by mysticalsoap · 0 comments

mysticalsoap commented

2026-08-17 17:49:56 -04:00

Owner

The VPS is already an offsite point of presence: restic rest-server --append-only under Quadlet there, plus a nightly restic copy after the local backup, caps offsite RPO at ~a day with no cloud account. Append-only is the point — a compromised home host can add snapshots but not delete or overwrite history, which the USB tier can't offer while mounted.

25GB VPS disk is fine while the repo stays small (media excluded by design); check headroom against restic stats first
Separate repo password (the restic copy target has its own), stored only home-side
ResticCheckStale-style staleness alert for the copy job
Keep the USB rotation as the cold tier — this complements, not replaces
Sequence after #100/#101 (Quadlet on the VPS)

Offsite today is the VeraCrypt USB rotation — offline (good against ransomware) but its RPO is the swap cadence, measured in weeks. Everything since the last swap has exactly one copy, in the house. The VPS is already an offsite point of presence: restic `rest-server --append-only` under Quadlet there, plus a nightly `restic copy` after the local backup, caps offsite RPO at ~a day with no cloud account. Append-only is the point — a compromised home host can add snapshots but not delete or overwrite history, which the USB tier can't offer while mounted. - 25GB VPS disk is fine while the repo stays small (media excluded by design); check headroom against `restic stats` first - Separate repo password (the `restic copy` target has its own), stored only home-side - `ResticCheckStale`-style staleness alert for the copy job - Keep the USB rotation as the cold tier — this complements, not replaces - Sequence after #100/#101 (Quadlet on the VPS)

mysticalsoap added the

vps

general-admin

labels

2026-08-17 17:49:56 -04:00

mysticalsoap referenced this issue

2026-08-17 17:50:17 -04:00

Stack analysis: feature gaps and divergence from other homelabs #116