summaryrefslogtreecommitdiff
path: root/gemfeed/2016-04-03-offsite-backup-with-zfs.html
diff options
context:
space:
mode:
authorPaul Buetow <paul@buetow.org>2022-01-03 10:59:59 +0000
committerPaul Buetow <paul@buetow.org>2022-01-03 10:59:59 +0000
commit733d3b39ecb0248854244e0a51941697d0cfc598 (patch)
tree52a4f8d0114aa7822414a321dbc7210fb5152cb4 /gemfeed/2016-04-03-offsite-backup-with-zfs.html
parent913e5472302993d8676b29bb1d67b7a5712c86bd (diff)
Publishing new version
Diffstat (limited to 'gemfeed/2016-04-03-offsite-backup-with-zfs.html')
-rw-r--r--gemfeed/2016-04-03-offsite-backup-with-zfs.html2
1 files changed, 1 insertions, 1 deletions
diff --git a/gemfeed/2016-04-03-offsite-backup-with-zfs.html b/gemfeed/2016-04-03-offsite-backup-with-zfs.html
index fce2bb4a..09efd9af 100644
--- a/gemfeed/2016-04-03-offsite-backup-with-zfs.html
+++ b/gemfeed/2016-04-03-offsite-backup-with-zfs.html
@@ -32,7 +32,7 @@
<p>The solution is adding another USB drive (2TB) with an encryption container (GELI) and a ZFS pool. The GELI encryption requires a secret key and a secret passphrase. I am updating the data to that drive once every three months (my calendar is reminding me about it), and afterwards, I keep that drive at a secret location outside of my apartment. All the information needed to decrypt (mounting the GELI container) is stored at another (secure) place. Key and passphrase are kept at different sites, though. Even if someone knew of it, he would not be able to decrypt it as some additional insider knowledge would be required as well.</p>
<h2>Walking one round less</h2>
<p>I am thinking of buying a second 2TB USB drive and setting it up the same way as the first one. So I could alternate the backups. One drive would be at the secret location, and the other drive would be at home. And these drives would swap place after each cycle. This would give some security about the failure of that drive, and I would have to go to the secret location only once (swapping the drives) instead of twice (picking that drive up to update the data + bringing it back to the remote location).</p>
-<p>E-Mail me your thoughts at sno@xo!</p>
+<p>E-Mail me your thoughts at snonux@snonux.de!</p>
<a class="textlink" href="../">Go back to the main site</a><br />
<p class="quote"><i>Generated with <a href="https://codeberg.org/snonux/gemtexter">Gemtexter</a>, served by <a href="https://www.OpenBSD.org">OpenBSD</a>/<a href="https://man.openbsd.org/httpd.8">httpd(8)</a></i></p>
</body>