How to secure project backups?

Question

linux

There is a project that is backed up to the Selectel server using rclone. The project and the mechanics of backups were discussed here: https://toster.ru/q/542910

Considering that backups are incremental, how can backups be secured in case of hacking (when an attacker gains access to backup hosting credentials) or in case of a project breakdown, when Will bad changes overtake good ones?
So far, I see two options:
- Backup to several storages (similar to snapshots)
- Backup via drop host (not directly to the backup server): the drop host takes the file via scp and uploads it via rclone. But this is getting too complicated.

What's the best way to get out?

Thank you!

Answer 1

Checksums Sign Encrypt Git or any non-optimized for vcs binaries - no
need

Answer 2

strain and try to put the project in git in its entirety, along with the content?

Answer 3

Encrypt, yes. And at home, in order for the cipher stream to go to the repository, the keys are on your server. As for protection against project breakage, this is not solved by backups. Well, incrementality can take you to a certain level - at the cost of losing changes over the interval, and so - you need VCS, this is his job - to track versioning.