The single best thing you can do security wise, is to NOT have any personal data on a web facing server.

Separate the data

Rereading it does look like you are doing the things right; so just audit what is on the public side. - your calendar and tasks- cool

Your photo and docs, do those need to be on there?

they are not accessible on the WAN

If they are on a server that is publicly accessible, please move them to a different location

Otherwise you sound like your doing well

Yep. And even I did it in my post. Notice what is missing?

Test your backups!

Agreed… Yes, and… specific to backups all the encryption….

Your production stuff, yes should be as well

Would that be sufficient

No.

3-2-1

Three copies; your working copy, and a cloud copy, and (as an example) on and external HD that you keep at a friend’s house….

On two separate media… so yes cloud can cover that

One off site. So yeah cloud covers that.

Encryption on your off site copies. Yeah I don’t care if they are Linux ISOs or your grandmas recipes. ENCRYPTED

Thanks for coming to my TED talk

🤣

TLDW ???

TLDR:: Bitcoin

We do a quarterly test.

I have the DB guy make a change, I nuke it and ensure I can restore it.

For us. I don’t work for Veeam, while I don’t like their licensing. Veeam is pretty good

Hth

¯\_(ツ)_/¯ Yeah. It is kinda hard.

Backups. First and foremost.

Now once that is sorted, what if your DB gets corrupted. You test your backups

Learn how to verify and restore

It is a hassle. That’s why there is a constant back and forth between on prem and cloud in the enterprise

We make it a drinking game…

Whenever a salespeople or a demo uses weasel language. DRINK!

Thank you. I’m totally going to steal “Tech debt reduction “. Ffs

Sigh, kinda… but don’t forget to factor in your backup costs too

I don’t use b2, rather; I have a personal account. Backing up 3 computers and they’ve never said anything over years So. Yeah it’s fine

I love pihole, for my family it is better as it helps on all the devices. Being able to block malware and tracking is nice too

There are options good and bad.

I’d back up just the dockers. The OS can be rebuilt easily enough. Yes Rsync the data

Or. Shut it down, pull the SD card, put it in another computer and rip it as an image, Full bootable backup

I would do the first not the second.

Ooo. Thank you.

Kindle screens are very good , but eff Bezos

An iPad is versatile, but then Apple…

But FOR ME, I cannot read books on a computer screen, it is just too awkward.

So yes I iPad.

Yes our servers running esxi boot from an SD card

But. That’s not to say you won’t have issues.

As others are saying distro matters

3-2-1

Three copies. The data on your server.

2. Buy a giant external drive and back up to that.

3. Off site. Backblaze is very nice

How to get your data around? Free file sync is nice.

Veeeam community version may help you too

3-2-1

Three copies. The data on your server.

2. Buy a giant external drive and back up to that.

3. Off site. Backblaze is very nice

How to get your data around? Free file sync is nice.

Veeeam community version may help you too