Hi,

 

Not really sure if this is the right forum, please let me know if this is out of line.

 

I’m trying to use Duplicati to backup all my important files. I have my unraid box and want to backup to another unraid box (MicroServer) which I will leave at my parents house when it is possible to travel again. The trouble I’m having is that I seem to be unable to reach the port from the duplicati interface (running in a docker container on the br0 interface). On canyouseeme.com, the port shows as open and I’ve forwarded the port from my Microserver so it should work, right? I use pfsense as the firewall. I’ve done several google seaches and read the duplicati posts, but I think I’m missing something because I can’t figure it out.

 

Does anyone have any clue how this should be set up? I set up the backups in duplicati using the GUI so I just put in my external IP and the port and it should work, right?

Could you clarify a couple things for me please.  As I understand it, on your "local" unRAID machine you have a duplicati docker container running. You are able to access that containers web GUI from within your local network to setup your backup jobs correct? What you are having issues with is accessing the storage endpoint on your remote unRAID server "MicroServer"? What container are you using as a storage endpoint on MicroServer and what port(s) does the service use? Have you checked to make sure that the port mapping of your storage endpoint docker container is consistent with what you have forwarded?

 

Hi! 

 

Sorry for my very late reply.

 

Your clarifications are correct. I'm bad at explaining properly  I'm not using a container at the end-point Microserver. I'm using the sftp feature on Duplicati so I thought I would change the port number for ssh and then open that port in my pfsense. I would have the corresponding port set on my "local" unRAID machine in the setting for each backup job. I've verified that the port is open on canyonseeme.com. The Microserver is also running Unraid and I've changed the ssh port there as well.

@muppie

I would absolutely not recommend exposing unRAID's ssh port to the internet. unRAID is nowhere near secure enough for that. I recommend using a docker container as an endpoint to backup to. Myself i use minio (an S3 endpoint), behind a treafik reverse proxy. If you are set on using sftp i am certain you can find a container to provide an sftp endpoint. 

 

Otherwise i would suggest setting up a VPN between the two networks and backing up over that (removing the exposed port of course).

Thanks. I’ll do that instead!