I'd suggest restic for backups (it's encrypted and deduplicated automatically, with the ability to have very simple retention policies). It backs up to basicall

I'd suggest restic for backups (it's encrypted and deduplicated automatically, with the ability to have very simple retention policies). It backs up to basically any dumb storage service (S3, Backblaze, Google Cloud) and you can sync it yourself since it's just a tree of files like a git repo. For storage on the actual machine, use ZFS or something similar so that you can do your restic backups on an atomic snapshot.