Remote Backup storage

Backups for example database export or media files benefit from out of your cloud storage to handle scenarios like

  • Cloud account wiped
  • Cloud account suspend/deleted

Overview

S3 storage

Defaulting on S3 file api standards enables storage in various locations, for example

  • Different Cloud vendor (other than your primary)
  • Backblaze
  • On-prem (Minio)

Encryption

Encrypted data

A common way to encrypt data is using GPG keys

Encrypted at rest

Some s3 api vendors allow configuring encryption at rest with either managed encryption keys or your own keys

Backup syncs to Backblaze

How to configure backup syncing to Backblaze with at rest encryption?

Step 1: Backblaze account

Step 2: Storage bucket + credentials

Step 3: Rclone