“Frequented Snapshots, Fortified by Encryption.”
Snapshots Speak Louder Than Strategies
- Backups aren't just insurance against failure, but a practice of care - technical, emotional, and relentlessly proactive.
Why Backups Matter
Backups aren’t a shrug toward inevitability; they’re a promise to your future self. Every snapshot is a moment frozen in time - configurations, data, secrets - ready to remind you where you were and let you rebuild where you need. They transform “what if” into “no sweat,” giving you peace of mind on your best days and an unshakable safety net on the worst.
My Backup Rituals
I've built a cadence that balances frequency, offsite security, and quiet automation:
- Triton (VPS #1, Virginia datacenter) Runs Borgmatic snapshots 3× daily → Encrypted with AES-GCM via GPG-wrapped passphrase sent over SSH to rsync.net
- Zephyrus (VPS #2, Washington datacenter) Runs Borgmatic snapshots 2× daily → Same encryption scheme and offsite endpoint as above
Every run logs success or failure, to multiple points. If a snapshot misses its window, my alert pipeline triggers, so I never wake up to a surprise
Encryption & Secure Transport
Trusting your backup destination isn't enough. You must assume breach:
# /etc/borgmatic/config.yaml location: source_directories: - /home - /etc repositories: - ssh://backup@rsync.net:22/~/my-backups storage: encryption: authenticated passphrase_command: "gpg --quiet --for-your-eyes-only --no-tty --decrypt /etc/borgmatic/secrets/borg_passphrase.gpg" retention: keep_daily: 7 keep_weekly: 4 keep_monthly: 6
- Authenticated encryption prevents tampering.
- GPG-wrapped passphrases live only in memory during a snapshot.
- SSH transport with key-based auth ensures secure transit.
Monitoring & Validation
A backup is only as good as its restore. That's why backups.beane.me exists:
- Visual timeline of every run, complete with timestamps
- Automated restore tests weekly, verifying archive integrity
- Alerting on stale backups or failed restores
Seeing a perfect grid of green checks isn’t vanity - it’s confidence made visible.
Beyond Catastrophe: The Emotional Layer
I’ve never had to recover under fire. Yet I guard my servers like I would a memory - with tenderness. Each archive holds incremental changes and quiet achievements: the new blog draft, the rotated SSH key, important notes from a Trilium instance. Backups are my way of honoring both data and the story it tells. They whisper, “I cared enough to be ready.”
Conclusion
Snapshots speak louder than strategies because they embody action, not intention. By automating frequent, encrypted, offsite backups and validating restores, you don’t just plan for disaster - you cultivate resilience. Your infrastructure - and your peace of mind - deserve nothing less.