I don’t know the best method, but my method is to have a locked down backup box in the same DC as the machine(s) it’s backing up. It mounts the machine to be b

I don’t know the best method, but my method is to have a locked down backup box in the same DC as the machine(s) it’s backing up. It mounts the machine to be backed up and runs Borg on that. The backup machine does need locking down in of itself but that’s a lot easier to do than locking down something public facing