• 0 Posts
  • 338 Comments
Joined 1 year ago
cake
Cake day: June 19th, 2023

help-circle
  • Sure:

    • Proxmox backs up all my VMs/CTs nightly to the proxmox backup server I run as a VM with an external HDD attached to it. This keeps around 30 versions with a retention policy so I can go back pretty far if needed. These are full bootable images and include everything.

    • Restic (using Backrest to manage it), runs on any VMs/CTs with critical data, and backs up to Backblaze B2 every night as well, this is a more limited choice of the critical files that I’d need. Similar retention policy as the proxmox backup.

    With both I try and do some full restores every month or two and test things out.













  • Sometimes you need a VM. They’re not overkill, just useful for different things.

    Examples; Running Windows, Running OSX, Passing through hardware to use isolated from the host (PCIe devices, USB, etc), Linux guests where you need a full kernel and permissions (for example to run Docker without issues caused by being nested inside a container).

    VMs don’t really have much more overhead than a container in most use cases too. For example a VM with debian installed uses about 30MB of RAM.








  • Basically all email is E2EE already since SSL/TLS is usually used for transport, even gmail and similar. But encrypted at rest in theory would help with stopping people from reading emails off the server.

    You also have to trust that Proton truly doesn’t have your keys to decrypt, but I imagine they do since you just login with a username/password combo and that’s enough to decrypt the emails.

    Although I don’t think it matters that much, my email is basically receiving notifications from services I use and occasional emails with a friend about planning a trip or something like that, nothing that particularly needs to be super private, just using a mail provider that isn’t actively scraping my data for ads (aka; gmail) is enough for me.

    For private communications I would use something more suited to that, like any of the reasonable E2EE chat apps.