backup-pi

How to unlock

This writes the encryption key for rclone and restic.
The key is then stored into an inmemory mounted file.
This protects against device theft by never storing the encryption key at rest.

ssh root@192.168.1.81
sh unlock.sh

Overview

graph TD;
    Takeout-->Drive;
    Computer-->Drive;
    Drive-->Pi;

Loading

Google Takeout does not currently support automated export to Google Drive

How to deploy

Deploy will prompt you for your healthcheck.io ping_key if not set.

wget -qO- https://raw.githubusercontent.com/gpolcode/backup-pi/refs/heads/main/deploy.sh | sh

Note: This disables USB/WiFi/BT and enables PCIe x1.

How to setup

Flash the Raspberry Pi Alpine Linux image
Install these packages:

apk add zfs restic rclone fuse3 smartmontools

Setup zfs 4-way mirror over 4 drives:

zpool create backup mirror /dev/sda /dev/sdb /dev/sdc /dev/sdd
zfs set mountpoint=/mnt/backup backup

Setup rclone:
https://rclone.org/drive/
https://rclone.org/commands/rclone_config_encryption_set/

Setup restic:
https://restic.readthedocs.io/en/stable/030_preparing_a_new_repo.html#local