January 12, 20251 yr I've read through the documentation about the Wireguard server-to-server VPN stuff, so I know its possible, and I'm going to be looking around for some HowTo's. In the meantime can anyone help me through *best practices* for establishing an unraid server at a remove site and using it as a backup for another server. Like the commercial "clouds" only assume I'm paranoid and don't trust cloud companies, so I want to fake it and make my own. Thanks.
January 13, 20251 yr Community Expert then use ssh and use ssh keys. you need to make a public key and a private key. then have the public keys on each machine... *This is essential whats happends when using a vpn... Theres a difference with making a tunnel and using a tunnel... Also what VPN? tailscale use wireguard underneath as example... Are you self hosting? Requirements Hardware: Two Unraid servers (local and remote site). Reliable internet connections on both ends. Software: WireGuard VPN (built into Unraid). Backup software (e.g., rsync, Duplicati, or CA Appdata Backup/Restore). Lets review: https://docs.unraid.net/unraid-os/manual/security/vpn/ Lets review on a Set Up WireGuard for a Site-to-Site VPN Step 1: Enable WireGuard on Both Servers Go to the Settings > VPN Manager in the Unraid web UI on both servers. Enable WireGuard and set it to VPN Tunneling. Step 2: Configure Server-to-Server Tunnels Local Server Configuration: Set up a "peer" for the remote Unraid server. Assign a unique IP address (e.g., 192.168.10.1) for the local WireGuard endpoint. Provide the remote server's WireGuard IP (e.g., 192.168.10.2). Remote Server Configuration: Set up a "peer" for the local server. Assign a unique IP address (e.g., 192.168.10.2) for the remote WireGuard endpoint. Provide the local server's WireGuard IP (e.g., 192.168.10.1). Keys and Ports: Generate WireGuard keys for both servers. Use a high, unique port (e.g., 51820) for WireGuard. Ensure both servers have appropriate firewall rules to allow WireGuard traffic. Routing: Add routes in WireGuard to ensure that traffic between the two servers flows through the VPN. Example: Local server: Route 192.168.10.2 through the VPN. Remote server: Route 192.168.10.1 through the VPN. Test the Setup Verify WireGuard connectivity: Ping the remote server's WireGuard IP from the local server: ping 192.168.10.2 Perform a test backup: Run the rsync or Duplicati job and verify the data appears on the remote server. Simulate a recovery: Restore a file from the backup to ensure integrity. ######### Once your VPN s are configured and you can reach each other over the Internet though the tunnel... Set Up Backups Option 1: Use Rsync Install Rsync on both Unraid servers (it’s pre-installed on most distributions). Create a Backup Script: Example script on the local server to push backups to the remote server rsync -avz /mnt/user/data/ [email protected]:/mnt/user/backup/ *I person lay use sftp unraid docker and a rsync over sftp... Automate with Cron via the userscirpt plugin... Add the script to the Unraid server's via teh user script plugin and setup cron jobs for scheduled backups... You can use SSH keys for passwordless access (even within the WireGuard tunnel). on how they connect... Option 2: Use Duplicati Install Duplicati from the Unraid Community Applications (CA). Configure Duplicati to back up data from the local server to the remote server's shared folder. Set up a schedule and retention policies. *other docker options exist as well... syncthing for example... Option 3: Use Unraid's Built-In Backup Tools mount a folder with unasinged disks... Install the CA Appdata Backup/Restore plugin. Configure it to store backups on the remote server (mounted via WireGuard or SMB over the VPN). or use other plugins/docker slike web rsync like rclone... ##################### Secure the Setup Encrypt Data in Transit: WireGuard already encrypts traffic, but ensure you use strong keys and keep them private. Firewall Rules: Restrict WireGuard access to only the two servers' public IPs. Close all unnecessary ports on both servers. Monitor Activity: Use Unraid's built-in logging and monitoring tools to track VPN usage and detect unusual activity. https://unraid.net/blog/wireguard-on-unraid?srsltid=AfmBOoqXoTx061KUBChxGHPVm9miJYU6bLSXYfYD-lA-mXrRfJqVntqW otherwise use software router hardware... I've moved to unifi and use there telport/sitemagic (which also uses wiregurad underneath... Its all in how you handle the keys and exchange the keys to each server...
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.