Backup
To see how I arrived at this process, go to Designing my backup process
Data classification
I have to classify data to four categories:
- absolute backup - backed up to a device in my apartment and device outside of my apartment
- this is data that is personal and if I loose it, it’s lost forever with no chance of retrieval
- pictures, personal documents
- home backup - backed up to my nas
- this is convenience backup, movies, TV Series, books,
- no backup
- keychain - I need to have my keychain stored somewhere where I can access it even if I lose all devices (theft, disaster)
Components
- Edge devices - my laptop and phone
- [[My home lab]]
- 1TB hetzner storage box
- 6TB home NAS (Asustor ???)
Absolute Backup
- Nextcloud runs on [[My home lab]] (accessible only through Tailscale)
- Every day, the server backs up the nextcloud folder with restic into NAS and hetzner storage box
- Mac and Phone use nextcloud clients
Issues:
- When my server dies, I might loose access to my data until I get to my computer and recover from backup
- Hetzner storage box always allows to delete files (when you have write access). If someone hacks my server, they can delete the backups.
- I have 10 weekly snapshots of the box that can’t be accessed using the server credentials. I can recover from snapshot if somebody deletes my backups.
How can I loose my data:
- My apartment burns down and I lost keychain or forgot the master password.
- Somebody steals [[My home lab]] and my NAS and hetzner has critical data loss at the same time
- My backups are corrupted and I can’t recover from them when [[My home lab]] dies.
- Something happens to me and I won’t be paying for the Hetzner Storage Box
Home backup
- The data lives in
/share
folder on [[My home lab]]. - Every night, it gets rsynced with my NAS
- The data is not personal and it’s not encrypted on NAS
How can I loose my data:
- If [[My home lab]] and the NAS gets stolen or dies
Keychain
- All my keys are stored in my KeePassXC keychain.
- I have it hidden at home on a USB stick.
- I have it in Dropbox (but dropbox login requires my main email)
- I don’t know how to protect against forgetting my master key
- [[When I die]]