Jump to content

maxse

Members
  • Content Count

    414
  • Joined

  • Last visited

Community Reputation

1 Neutral

About maxse

  • Rank
    Advanced Member

Converted

  • Gender
    Undisclosed

Recent Profile Visitors

The recent visitors block is disabled and is not being shown to other users.

  1. Thanks, amazing! Yes, now that I think about it, they talked about SSH into the rpi, which is what I'd rather do, than send the IPMI turn on that way. Quick question that I just realized. This solution doesn't really provide any versioning? But is that even necessary since delete will not be synced, and also the remote server files will be read only so no worries of a crypto. But what if one of the people on my home network running windows gets a virus that then gets to the main unraid server through the mapped drive, and if I don't detect it right away will then get get copied to the remote server when rsync runs? Or do things not work in this way and a windows virus (of any sorts) can't make it's way to the unraid file system? I was just thinking about crypto, but it is that the only "threat" that I need to worry about in this scenario, how about the more typical windows viruses, trojans, etc... How would I be able to "go back in time and restore prior to when the virus or malware hit? Or does this solution really eliminate the need for versioning in backups? Thank you soooo much again guys! I can't wait to start setting this up! Very exciting
  2. @strike thanks for telling me about the issue! I would do share-shares, it would have been a nightmare if I didn't know about it trying to figure out what I did wrong! So an SSH port has to be open both main and target servers from what I see, correct? And what is SCP? Any tips on how to get the backup server look for the keyfile on the main server? I didn't see any tutorials or guides for doing that, and don't really know what it means. I already have a duckdns running on my main server so IP will be static so that's good. Also, just to make sure I understand, the power on IPMI command can be sent via SSH to remote server right? The remote site won't need a pivpn running? I saw in the linked thread that they just switched to SSH completely, but I don't if they meant that you still need to SSH into the remote rpi to send the IPMI command to turn it on?!! I'm pumped about this, my buddy said this would be perfect, and I am happy too because the files will get encrypted always since the server will be set to shut down, and no one will have access. I'll also figure out how to use the write protect command suggested about to prevent files being changed in the event of a crypto, boom! You guys are the best! I hope you can all help me once I am ready to implement this! I am still waiting on parts to arrive to put everything together, X8SIL-F board, X3470 processor and 8 gigs of RAM. That will be my first time working with used and server parts, but should be similar to consumer components.
  3. Thanks guys. Fair enough. I’m doing one-way sync. I was originally looking to have incremental backups to protect me from an accidentally deleting something... but this method will work. Just no replicating a delete, write protect backup, and shit down the server when finished to keep everything encrypted. Great! I watched a video by spaceinvaderone that showed how to have unraid grab the keyfile to decrypt drives and start array on a hosted ftp site. Not sure how I would do that from my main server. Any thoughts on this? Wouldn’t this mean I would have to open up my server to the internet just for this specific file? thanks!
  4. Wow! You guys are the best! I don't know anything about scripting or how they work or where to enter but I know there is a plugin for it and I will figure it out. Most important thing is that after going through all these options for a month or so since I started this thread, I have settled on the remote power on with IPMI SSH with rsync method then shut off, no one at the remote site will have any passwords, so after shutting down the drives will be encrypted again. Perfect! This seems to be the most reliable and stable method and also free! I just got my case in, Node 804, and ordered the Supermicro X8SIL-F, 8 gigs of RAM, and Xeon X3470. Can't wait to get this going guys, thank you so much! I'm sure I'll have other questions about SSH and how to power on, etc... But I'll ask those in the other threads. Awesome about how to make the files read-only after transferring them to protect from crypto. So I don't have to use BTRFS with snapshots. I was concerned about the stability still with it, and me screwing something up with the snapshots.... My only question is what happens when I rename a file or delete a file locally, then the rsync script runs and it wont be able to delete the file or rename it. What happens in this case? Does the entire backup just fails, or will it worst case, write a another file being a duplicate and just leave the original one intact on the remote server?
  5. Nice! That's a great idea @strike Guys quick question. I am looking at a Supermicro X8SIL-F with an X3470 But I just saw something that the Supermicro X8 boards IPMI is not supported in unraid? So this means I won't be able to use IPMI tools to remote power on with IPMI? I think I read this for an IPMI plugin for unraid 6.1+. I'm not sure if support for the XSIL-F had been added since? Or if it even applies to me in this case?
  6. Hey guys, I'm looking to build another unraid server which will probably be used as a backup server, or perhaps another main server. I currently have an i5-8400. I would like to build it with used server parts. What's an equivalent Xeon processor that will have similar performance to the i5-8400 and also in similar power consumption (electricity usage). I like that my current server idles at about 90 watts and goes to 150 at full load, and want a similar Xeon. If it means getting a less powerful Xeon to get similar power consumption I'm okay with that also. Worst case this server will run 1VM, and multiple dockers, and plex (but I could always through in an nvidia card in it if it needs to use plex). But right now the plan is just to have it be a backup. Looking forward to hearing from you! Also it will likely be used in a supermicro case with a 920W-SQ PSU (if it helps you guys recommend something similar in power usage to my i5 that I have now). Although not 100% set on use the supermicro case. Thank you!
  7. This is awesome. Thanks bud! i just got a node 804 case shopping for used server parts now I’ll set this up on my local network first to make sure it’s working. Thank you so much! btw, do you do anything for versioning to protect from ransomware? Like if you accidentally get a crypto type of locker on your main server l, wouldn’t it then encrypt the backup as well when rsync runs? Then both servers are screwed?
  8. @Hoopster do you send the IPMI commands now via SSH also along with the rsync commands or is a separate vpn solution on a raspberry pi still needed for this (assuming the rpi will just run duckdns on it and the ip address of the remote unraid server is known).
  9. I just saw that Veeam which is popular for windows systems for free, is also available for Linux! But I don’t see it mentioned here much. Anyone use it to back up their server? Most of the posts are about using Veeam to back up a windows machine TO unraid not about backing up the unraid server itself. Thanks
  10. When the unraid is powered off isn’t that going to prevent zerotier from working since dockers are off? i think I’ve got the answer with the powering on and off of unraid with encrypted drives. Just need help answering the questions above about encryption and if drive encryption would be enough... and also how would I initiate the connection from main to remote server to start it? Can you you help me with the step by step please? If the encryption of the drive is as secure as having live files encrypted (and since I’m gonna send comments tk shut down array after rsync so drive will go back to being encrypted) then I’d like to use the SSH method with rsync which seems most reliable and doesn’t require additional software. Should I start a new thread asking about this specific method? I don’t even know where to go to set this up or how
  11. Hoopster, I just had a breakthrough! The dealbreaker with rsync originally for me was that I can't do encryption so an always-on server, someone at my buddies' place could see files since the drives are unlocked... Well, if I do it the way you're saying with the SSH and rsync, powering on and off when done. Then the contents will pretty much always be encrypted right? Is there any difference in security of the encrypted drive shut off, vs. cloudberry encrypting the live files themselves? And then also, with the SSH rsync method (again I dont know much about it since I went in another direction due to the encryption) can the key to unlock the drive also be passed in the SSH command? Or is that something that would be passed in the "separate" part via the VPN on the rpi that will signal unraid to turn on in the first place... ------ Also, again in that post it says he switched to just SSH and abandoned the rpi vpn, was he referring that the you could now also turn on and shut down unraid with just the SSH? Again if the encryption thing of the drive (since it will be enabled after backup is down with the shutdown command) is equivalent to having a file encrypted by cloudberry? Here we goooooo, haha. Looking more like the original suggestion of SSH w/ rsync is the winner lol
  12. Hoopster, you're the man! Thank you sooo much, will read more. I'm not too familiar with what IPMI is but understand it a way that a BIOS could even be controlled via a LAN connection. So the IPMI interface will have its own separate ethernet power and it's own separate IP address on the network, correct? Now what do you use to initiate a connection from your main unraid server into the rpi vpn to then be able to send the command? Also, do you know if the vpn and duckdns could both be running on the rpi at the same time, or is it part of the rpi vpn OS that will be installed on the rpi? I would need a dynamic dns, so running that also on the rpi would be ideal since the rpi will always be on and is super low power. Wow I love this! Learning so much, thank you SOOO much everyone. Love this community
  13. Niceee! I thought I remembered reading it. But it's part of the rsync script. Since I'm going to be using minio and cloudberry, how will cloudberry know when it can get started that the remote server has been powered on? Is cloudberry just something that could be part of a script like you guys did with rsync ssh? How would unraid know that cloudberry is finished backing up and to send the shut down command? Hoopster could you give me more details on what I need to do please? Where could I read about the IPMI tool and how to set it up. I guess I could figure out the PiVPN, but wouldn't know what to do after, and how to have the main unraid connect to that vpn to send the proper commands? I also saw in that thread that he switched to pure SSH and ditched the VPN, but I'm not sure if he was specifically referring to the rsync transfer being over SSH and he was still using the rpi VPN for the turning on and off.
  14. I mean that the conversation with my buddy got weird when $$$ fell into the equation. That was unexpected since he was originally okay with it.. Quick question. Is it possible to have unraid turn off and then turn back on, on a schedule of sorts? I'm thinking to just have the server on at night from say 2am-8am for backup to complete. But it needs to be reliably turn itself on and off so that minio docker and cloudberry will be able to connect to it. Maybe some kind of a solution with raspberry pis sending a signal to each other with an IPMI motherboard or somehting?
  15. So now that I pretty much figured out the method. Minio on remote server, then cloudberry to Minio, done... I call my buddy to confirm again that it's likely going to be a 4U case, so then he starts asking me about electricity, etc... I honestly had no idea this would even be an issue nor any clue how much it would cost... I figured a "low power" Xeon from one of JDM Waat's builds on reddit, could cost maybe $200 a year to be on 24/7... Well then things got weird because he started calculating that it's gonna cost $16/month for no reason, etc... So I don't even know now, looking not to even do this thing. I mean I guess $16/month my buddy would pay because of me is not that small amount. Adds up for sure! So I'm thinking of just figuring out a way to back up to external 10tb easy stores and be done. Just need a strategy (made a separate post). But did I get the costs about right? There's no way to get it cheaper for electricity right? I guess I can see why people would prefer to have a Synology if it uses half the power...