From cfde6139cf78ff419e98da07285b53dfb4a80eab Mon Sep 17 00:00:00 2001 From: Jake Howard Date: Sun, 6 Jun 2021 15:54:23 +0100 Subject: [PATCH] Mention maybe BTRFS for bit-rot protection --- content/posts/backup-strategy-2021.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/posts/backup-strategy-2021.md b/content/posts/backup-strategy-2021.md index 6e1df72..7cf833c 100644 --- a/content/posts/backup-strategy-2021.md +++ b/content/posts/backup-strategy-2021.md @@ -74,7 +74,7 @@ This is a new one for me, and may be where you either start thinking I've gone p All my backups are encrypted, and rightly so. But what happens if I lose the keys? The keys live in my [Bitwarden](https://bitwarden.com/) (well [vaultwarden](https://github.com/dani-garcia/vaultwarden)) vault, which is also encrypted and stored with the backups. If I lose my server and computer, say in an aforementioned house fire, I'm fresh out of luck. [Restic's encryption](https://blog.filippo.io/restic-cryptography/) is such that without the key, the data is unrecoverable. -To cover this base too, I back up the absolute code data onto a USB drive. The files on the drive are stored plainly in directories, and the drive encrypted (with [LUKS](https://en.wikipedia.org/wiki/Linux_Unified_Key_Setup)) with a key I know. I have 2 drives, with the same backup scripts on. 1 of these drives sits in a draw on my desk, the other in an "undisclosed location" away from my house (No, i'm obviously not going to tell you where it is). The drives are never in the same location, to minimize potential risk, and the drives are only plugged in to perform a backup, then unplugged. +To cover this base too, I back up the absolute code data onto a USB drive. The files on the drive are stored plainly in directories, and the drive encrypted (with [LUKS](https://en.wikipedia.org/wiki/Linux_Unified_Key_Setup)) with a key I know. I have 2 drives, with the same backup scripts on. 1 of these drives sits in a draw on my desk, the other in an "undisclosed location" away from my house (No, i'm obviously not going to tell you where it is). The drives are never in the same location, to minimize potential risk, and the drives are only plugged in to perform a backup, then unplugged. To help detect the flash storage degrading, I'd like to experiment with BTRFS on the drive, which would also bring some compression with it. For the drives themselves, I didn't want to use just anything. They needed to be very rugged, reliable and have a reasonable capacity. For me that left 1 option: the [Corsair survivor stealth](https://www.corsair.com/uk/en/Categories/Products/Storage/USB-Drives/flash-survivor-stealth-config/p/CMFSS3B-512GB). It's both waterproof, shockproof, easily available, and available in a number of capacities. I went for 32GB, partly because it should be ample for my needs, and it was on offer at the time.