StorageAug 14, 20265 min read
The 3-2-1 Backup Strategy: ZFS Sanoid & Encrypted Restic
Automating immutable hourly local snapshots and offsite encrypted synchronization to Backblaze B2, complete with health pings and restore test drills.
#ZFS#Storage#Backups
Layer 1: Local Immutable Snapshots with Sanoid
Sanoid takes policy-driven atomic snapshots every hour, retaining 24 hourly, 30 daily, and 3 monthly copies locally. If ransomware or an accidental rm -rf occurs, rollback takes under two seconds.
Layer 2: Offsite Encrypted Deduplication via Restic
Daily snapshots are piped into restic, client-side encrypted with AES-256, and pushed to Backblaze B2. Deduplication saves over 68% storage compared to raw archives.
← Back to all blog entries
Published by Steve Harker • Personal Homelab Docs