I personally like the model of burp[1]. The clients can be configured to not have delete or even restore access to their backups and the backup server is respon

I personally like the model of burp[1]. The clients can be configured to not have delete or even restore access to their backups and the backup server is responsible for rotating backups. [1] https://burp.grke.org/ https://burp.grke.org/