Gosh I’m sure that this will be some dangerously delicate process that will be too hard for me…

pihole -up

Oh. Cool.

Use brioche, it holds up better in the custard…

Real maple syrup. Accept no substitutes.

A dash of nutmeg.

Kde. I’d love to be able to give some erudite examples of why.

Alas, the default is clean and works for me. It stays out of the way.

The single best thing you can do security wise, is to NOT have any personal data on a web facing server.

Separate the data

Rereading it does look like you are doing the things right; so just audit what is on the public side. - your calendar and tasks- cool

Your photo and docs, do those need to be on there?

they are not accessible on the WAN

If they are on a server that is publicly accessible, please move them to a different location

Otherwise you sound like your doing well

Western digital external. My book 20tb or whatever size works for you. I blew through a 12 and 16 filled with photos and videos…

USB 3 and portable; I use exfat as my friend keeps a copy at his house.

And I just rotate through 3. One at home one at work and one with my friend.

FreeFileSync to keep everything updated

No. Not really

For long term storage LTO is the answer.

If cost/ lifetime storage are the only factors

I prefer drives; it is a cost I’m willing to pay as speed is more important, at home —At work we have both because 3-2-1

However I have been looking at tape for home use for some long term storage

Orders a <null>

Yep. And even I did it in my post. Notice what is missing?

Test your backups!

Agreed… Yes, and… specific to backups all the encryption….

Your production stuff, yes should be as well

Would that be sufficient

No.

3-2-1

Three copies; your working copy, and a cloud copy, and (as an example) on and external HD that you keep at a friend’s house….

On two separate media… so yes cloud can cover that

One off site. So yeah cloud covers that.

Encryption on your off site copies. Yeah I don’t care if they are Linux ISOs or your grandmas recipes. ENCRYPTED

Thanks for coming to my TED talk

We do a quarterly test.

I have the DB guy make a change, I nuke it and ensure I can restore it.

For us. I don’t work for Veeam, while I don’t like their licensing. Veeam is pretty good

Hth

¯\_(ツ)_/¯ Yeah. It is kinda hard.

Backups. First and foremost.

Now once that is sorted, what if your DB gets corrupted. You test your backups

Learn how to verify and restore

It is a hassle. That’s why there is a constant back and forth between on prem and cloud in the enterprise

We make it a drinking game…

Whenever a salespeople or a demo uses weasel language. DRINK!

Thank you. I’m totally going to steal “Tech debt reduction “. Ffs

Sigh, kinda… but don’t forget to factor in your backup costs too

And as soon as that’s working; they’ll break something else

Same OS, you just flip the disk over to install

I don’t use b2, rather; I have a personal account. Backing up 3 computers and they’ve never said anything over years So. Yeah it’s fine

But we’re an EDU!!!

I love pihole, for my family it is better as it helps on all the devices. Being able to block malware and tracking is nice too

There are options good and bad.

I’d back up just the dockers. The OS can be rebuilt easily enough. Yes Rsync the data

Or. Shut it down, pull the SD card, put it in another computer and rip it as an image, Full bootable backup

I would do the first not the second.