bensums / linux_scripts

linux_scripts

Backup

On machine to be backed up (source machine):

1. Ensure borg backup is installed
2. Switch to root.
3. Make a password-less SSH key
4. Create bin/backup/vars.sh according to instructions in bin/backup/backup.sh
5. Save passphrase somewhere safe and secure, e.g. LastPass

On target machine:

1. Make sure borg backup is installed.
2. Make sure there's a dedicated user for borg backup
3. Add the following line to borg backup user's .ssh/authorized_keys

command="/usr/local/bin/borg serve --restrict-to-path [repo_path]",no-pty,no-agent-forwarding,no-port-forwarding,no-X11-forwarding,no-user-rc [key]

Back on source machine:

1. Source bin/backup/vars.sh and run borg init -e repokey-blake2
2. Schedule bin/backup.sh hourly.