I've seen too many people lose data. Here's what actually works.
- Encrypt before transfer. Restic or borgbackup. Never raw rsync.
- Rotation matters. Grandfather-father-son minimum. Disk is cheap. Your time is not.
- Provider diversification. Same datacenter means same outage.
- Test restores monthly. Untested backup is wishful thinking.
My setup: Time4VPS production, CloudCone backup, Leaseweb tertiary. Different continents. Restic to both, SFTP backend. 30 daily, 12 monthly. Total cost under $8/month.
Common rsync mistakes I made:
- --delete without --dry-run first. Lost a day of data.
- No bandwidth limit. Saturated link, got throttled.
- Key in ~/.ssh without passphrase, no fail2ban. Backup server was compromised within a week.
Better tools: restic, borg, kopia. All deduplicate. All encrypt by default. I use https://restic.net
Questions welcome. Flames ignored.