Unattended local backups

Needs /var/secrets/restic to be manually provisioned.

Based on ~/.dotfiles/restic/run, as a starting point.

Backing up /srv/Attic is huge (100s of GBs), redundant (same hard
drive), and slow (hours). It probably makes sense to mirror it instead.

The repo password is stored on the same hard drive in plaintext, which
means our repo is not secure at rest. This is a bigger issue with the
initial setup without full disk encryption, so we choose not to address
it; however, this does expose all backups whereas previously just this
server was exposed.

The most important remaining tasks are to mirror the restic backups
remotely, and to automate on a timer.

0 files changed, 0 insertions, 0 deletions