I view my photos using immich, historically I used photo prism with photosync to back them up.
My photos are stored on my nas (omv), immich is on my android and I access it through wireguard.
My nas is raidz1 with 4 drives, so it is relatively resilient. The photos are backed up to a separate external hard drive too using borgbackup.
What i’d like to do is the following: Back up my photos externally - at a family members house with a pi zero connected to a hard drive, which would be connected to their WiFi or via an ethernet cable to the router.
Ideally, the first backup should be done at home before, I don’t want to backup 100’s GB over the internet.
Would a simple wireguard tunnel be ok here? Should a different method be used?
Has anyone done such a thing? I read a lot about vps, but I don’t what the ongoing commitment in cost when I have a free option.
One of my worries is that I don’t want a compromised device on the family member’s network to compromise mine, would the wireguard tunnel be enough to secure it? Would WiFi be more secure than ethernet cable?
I’ve got your exact setup:
- running immich (and other services with valuable data) at home (on OMV!)
- backup server at family member’s house
- regular backups from here to there through Wireguard tunnel with Borgbakup
AMA!
I don’t want a compromised device on the family member’s network to compromise mine
If with “mine” you mean the pi Zero, I wouldn’t worry too much about that. Just configure the pi’s firewall to drop all traffic from the LAN (they have no business with this device anyway), except any incoming traffic from the router on the Wireguard port.