How I perform backups
The primary goal with my backups is to quickly restore my laptop to a working state so I can continue performing my duties. This also applies to fresh installs of the OS of course.
Files and secrets
I run a backup.bash script that mounts a very small 2TB SSD over USB-C, unlock it using LUKS and a long passphrase that I have in my head and then does several backup operations to it.
- git push of my password store.
- Backup of my secret encryption keys, that my password store depends on.
- Run restic from its own script that also backs up to S3. Total size less than 100GiB so far.
OS setup and configuration
I use Ansible to restore packages and certain configurations. Since I run Atomic Fedora I have two playbooks, one to run inside the host OS that installs flatpaks and does certain limited config, and a toolbox playbook that installs dnf packages inside my main toolbox.
This also allows me to delete my main toolbox and quickly restore it back to its original state, which is something toolbox is lacking as a feature.