I’m in the way of migrating the backups of several linux servers from a own debian machine to a QNAP NAS (QuTS hero 5.2). Actual backups are performed by sftp with one account in the backup server for every server to backup. Backups are private for each server, and all is local network (except one external server that is reached by ssh tunneling).
My question is why would be the better way in the QuTShero system? sftp accounts in QNAP seems to be more focused in administration, rest server seem also to be an option, both direct binary an docker container, but I need https, not http. Furthermore QNAP offers some other things as HBS3 that offer rsync, but no idea on that. Any advice from QNAP users?
I am turning my QNAP as backup server as well. I have switched from QuTS hero to QTS, the QuTS hero system was really unstable, but except ZFS I believe most of the function are the same.
For backup I think restic rest-server and SFTP should both work.
The rest-server has TLS support, so you can use https, this is what I am planning to do.
You can fine tune the account used for SSH but I believe you cannot have a user without administor privileges for backup purpose only.
With HBS3, you are tied to QNAP eco system, which is not good in my opinion. It works, but you need their tool to restore if your main QNAP nas is down, you will have to buy another QNAP device to have redundancy, otherwise you need to have a machine with QNAP tools installed and periodically copy the data to this machine. This is the main reason I decided to migrate away from HBS3.
I did just the opposite, switching to QuTS hero for having ZFS, a raidz2 actually. I’ve no complains right now, it’s working fine.
For backups I ended setting up the rest-server with TLS for https, If you are planning to do so, my advice is to use the docker restic/rest-server package which is the way I did, as the one from QNAP store was quite obsolete and I was not sure about it’s origin.
It’s not complex at all, just follow the steps of installing Container Station in QNAP, create the keys for TLS and configure the environment options when installing the restic/rest-server package. Once all installed in QNAP, creating rest-server users is straightforward through docker exec command following the restic instructions. Performance is also quite good.