7MS #725: Building a Bulletproof Backup Solution

7 Minute Security21mJune 5, 2026
AI-Generated Summary

Brian Johnson reveals how a failed backup system forced him to build a 'bulletproof' backup solution that blends personal and work data across multiple redundant layers—proving that true security isn't about complexity, but about strategic redundancy. What started as a crisis with a failing Proxmox Backup Server (PBS) led to a radical upgrade: acquiring a budget auction server from Hetzner with massive storage, then using it to create a dedicated, encrypted, offsite VM backup vault. But the real breakthrough? He leveraged his existing ARQ backup software to push personal data—photos, tax returns, videos—to that same server via SFTP, creating a fourth encrypted copy. This 'overkill' setup, while unconventional, embodies a new philosophy: treat every critical data point as a target worth defending with multiple, geographically and logically separate copies. The episode dismantles the myth that backups must be simple or cheap—instead, Brian argues that the cost of a single data loss event dwarfs the price of a robust, multi-layered defense. The episode also doubles as a love letter to Proxmox, where Brian declares his full allegiance after VMware’s ESXi Free discontinuation. He praises Proxmox PBS for being free, easy to set up, and capable of backing up entire VMs in minutes. He walks through his full stack: local backups, cloud drives (Dropbox, OneDrive, Google Drive), encrypted cloud storage via ARQ Cloud, and now a dedicated, mirrored, offsite PBS server. The result?

Key Takeaways
1

Use ARQ backup software for simple, encrypted, multi-cloud backups to Dropbox, OneDrive, Google Drive, and SFTP targets with full retention control.

2

Deploy Proxmox PBS (free) for full VM-level backups of your servers, enabling nightly, encrypted, offsite VM snapshots with minimal setup.

3

Use Hetzner’s auction system to get massive, low-cost storage (e.g., 8TB mirrored + 14TB single) for backup servers—ideal for offsite redundancy.

4

Encrypt all backups at rest using tools like ARQ or Proxmox PBS, ensuring stolen data is useless even if compromised.

5

Create a fourth redundant copy by using a dedicated backup server’s extra drive to SFTP your personal data, achieving true 4-2-1 redundancy.

…and 3 more takeaways available in PodZeus

Chapters
0:01
2 min

The Backup Crisis That Changed Everything

I found myself this week in a backup conundrum. where my work backups were no longer working. And I was sort of forced to find a way to correct that.

Highlight
2:07
4 min

Personal Backup Evolution: From CrashPlan to ARQ

Brian walks through his journey with various backup tools, settling on ARQ for its simplicity, flexibility, and ability to back up to multiple cloud services.

6:01
5 min

Work Backup Architecture: Proxmox and the Data Center

He details how he uses a Hetzner Proxmox server for mission-critical VMs and how he previously used cron jobs and scripts to back up data.

10:52
5 min

The PBS Breakdown and the Auction Server Solution

You've either got to have a so lean it's dangerous retention policy, or you need to look at something with more disk capacity.

Highlight
15:44
6 min

Building the Bulletproof System: 4+ Redundant Copies

I will now have a fourth copy in a fourth like cloud of all my personal data? And you know, yes, I guess technically it's intermixed a little bit with the work data, but I've got the 5-4-3-2-1 rule or something like that.

Highlight
High-Impact Quotes
And yes, is it overkill that I will now have a fourth copy in a fourth like cloud of all my personal data? And you know, yes, I guess technically it's intermixed a little bit with the work data, but I've got the, I don't know, 5 -4 -3 -2 -1 rule or something like that.
Brian Johnson15:26
You know security is hard, so let's assume we're probably gonna get pwned by noon. But if we all start to get the basics right, we might not fully get pwned until tonight.
Brian Johnson0:01
I've fallen in love with another and her slash his slash they is, they's name is a prox mox. I will never trust Broadcom again.
Brian Johnson19:00
Speakers

Host

Brian Johnson
Topics Discussed
backup strategy95%data redundancy92%proxmox backup server90%vm backups88%arq backup software85%personal data backup83%encrypted backups80%hetzner auctions75%
People & Brands

Brian Johnson

person

15xNeutral

Hetzner

organization

12xPositive

ARQ

product

12xPositive

Proxmox

product

10xPositive

Proxmox Backup Server

product

8xPositive

7 Minute Security

media

5xPositive

Claude

other

5xNeutral

Dropbox

other

4xNeutral

OneDrive

other

3xNeutral

Google Drive

other

3xNeutral

Start discovering podcast insights today

Start with a 7-day trial and explore a growing catalog of popular podcasts. No credit card required.

No credit card required • 7-day trial • Cancel anytime