4 ms·

Restic on object storage outside your infra. It's what I do and I think it should be safe from ransomware.