4 ms·

Is there any way to sync encrypted data to non-trusted server with Syncthing? I would like to have encrypted off-site backup.

by butz 6y ago

LeoPanthera 6y ago
"borg" is the tool for one-way encrypted backup, not syncthing.
- rsync 6y ago
  I think you should look into the 'borg' backup tool - it has become the de facto standard for remote backups because it does everything that rsync does (efficient, changes only backups) but also produces strongly encrypted remote backup sets that only you have a key to ... the provider has no access to the data. The borg website is here: https://borgbackup.readthedocs.io/en/stable/ https://borgbackup.readthedocs.io/en/stable/ and a good description of how it works and why you should use it is here: https://www.stavros.io/posts/holy-grail-backups/ https://www.stavros.io/posts/holy-grail-backups/
  - catherd 6y ago
    When somebody uses borgbackup with you guys, is there any way you can include "hey you have a stale lock file" (that's probably keeping your backup from working) in the automated email that gets sent when disk usage doesn't change?
0xCMP 6y ago
Borg or Restic are good for off site backup, but if you want basically an untrusted storage server Reslio does support "encrypted" folders. The UX is a little hard to figure out sometimes though, it's not open source, and is not free. But very good software.
myu701 6y ago
It's on the way. Not done just yet. TL;DR: watch this page: https://github.com/syncthing/syncthing/wiki/Untrusted-devices-(encryption)-status https://github.com/syncthing/syncthing/wiki/Untrusted-device... Short history: There was 1 attempt to do it which ended with nothing https://github.com/syncthing/syncthing/issues/109 https://github.com/syncthing/syncthing/issues/109 https://github.com/syncthing/syncthing/pull/4331 https://github.com/syncthing/syncthing/pull/4331 Then there was a follow-up PR (which I was downright giddy to discover): https://github.com/syncthing/syncthing/pull/6214 https://github.com/syncthing/syncthing/pull/6214 That PR was just closed yesterday in favor of https://github.com/syncthing/syncthing/pull/6727 https://github.com/syncthing/syncthing/pull/6727 which is where the current flame of hope burns.
dddw 6y ago
I use restic for that, prerry great. Also for two wat, check out cryptomator

Is there any way to sync encrypted data to non-trusted server with Syncthing? I would like to have encrypted off-site backup.

by butz 6y ago

Is there any way to sync encrypted data to non-trusted server with Syncthing? I would like to have encrypted off-site backup.

LeoPanthera 6y ago

"borg" is the tool for one-way encrypted backup, not syncthing.

rsync 6y ago
I think you should look into the 'borg' backup tool - it has become the de facto standard for remote backups because it does everything that rsync does (efficient, changes only backups) but also produces strongly encrypted remote backup sets that only you have a key to ... the provider has no access to the data. The borg website is here: https://borgbackup.readthedocs.io/en/stable/ https://borgbackup.readthedocs.io/en/stable/ and a good description of how it works and why you should use it is here: https://www.stavros.io/posts/holy-grail-backups/ https://www.stavros.io/posts/holy-grail-backups/
- catherd 6y ago
  When somebody uses borgbackup with you guys, is there any way you can include "hey you have a stale lock file" (that's probably keeping your backup from working) in the automated email that gets sent when disk usage doesn't change?

0xCMP 6y ago

Borg or Restic are good for off site backup, but if you want basically an untrusted storage server Reslio does support "encrypted" folders. The UX is a little hard to figure out sometimes though, it's not open source, and is not free. But very good software.

myu701 6y ago

It's on the way. Not done just yet. TL;DR: watch this page: https://github.com/syncthing/syncthing/wiki/Untrusted-devices-(encryption)-status https://github.com/syncthing/syncthing/wiki/Untrusted-device... Short history: There was 1 attempt to do it which ended with nothing https://github.com/syncthing/syncthing/issues/109 https://github.com/syncthing/syncthing/issues/109 https://github.com/syncthing/syncthing/pull/4331 https://github.com/syncthing/syncthing/pull/4331 Then there was a follow-up PR (which I was downright giddy to discover): https://github.com/syncthing/syncthing/pull/6214 https://github.com/syncthing/syncthing/pull/6214 That PR was just closed yesterday in favor of https://github.com/syncthing/syncthing/pull/6727 https://github.com/syncthing/syncthing/pull/6727 which is where the current flame of hope burns.

dddw 6y ago

I use restic for that, prerry great. Also for two wat, check out cryptomator