hamsda

DAVx5 basically acts as the connector between your server and your calendar/contacts/files apps

Thank you for the explanation. I'll probably be testing a lot of FOSS apps on my current android before I make the switch, so it's good to know that I have to look out not just for usability, but also connectivity!

You've got a point, but now I gotta ask: Where do you store your original paperform documents? You know, the real-life critical things. Maybe I'm wrong, but I feel like most people store these things at home, possibly tucked away in a neat, little, sorted folder, for preservation. Which would be a nightmare for all the same reasons, but seems strangely accepted and widely practiced.

No data I own is life-or-death critical. Losing everything would be really bad, but many things can be restored in alternative ways, except the photos.

Also, I may be able to backup the most important stuff (which would only be a few GB at most) to an offsite server, as long as nextcloud (or an alternative) is able to export contacts, calendar and photos, or I can single these out in some other way. As long as this somehow works, I can rent a cheap hetzner server with a few GB of storage and have that be the backup target for the most critical stuff.

Yes, you're right. As David From Space said in this comment, the real critical data is far less then all of the backed up data.

So I definitely can have an offsite-backup, it just depends on if I can single these things out in nextcloud, possibly via regular export to the filesystem.

If you really mean life-or-death critical

No data I own is "life-or-death" critical.

I can ask around for contact info again, same with calendar events I had planned. Some documents can be restored via the original service or by paying a fee to get a new original document, I still have folders full of originals in paper form. Some info can be restored by looking through my bank account or online buying activity. Losing my photos would be really sad, but nothing of that will kill me or destroy my life.

But I definitely can save the most critical stuff (probably a few GB only), if nextcloud (or some alternative) has the ability to regularly export these to an on-disk location. This way, some backup utility like restic or rsnapshot shoud be able to do the job.

Now, just to throw it out there, my actual ‘critical data’ is way smaller than my total backed up data

That's also the case for me. I'd probably count a few GB as critical. Contacts, Calendar, some photos, some documents.

If nextcloud (or some other alternative) has the ability to regularly export these things to an on-disk location, I could definitely backup that to some cheap hetzner server. This will not be a pbs backup, but I can get by with an offsite-backup done by something like restic or rsnapshot

Thank you for your advice!

Thank you for sharing your experience of the process!

On my phone, I use DAVx5

I'm a little confused after looking at the website. What exactly does DAVx5 do? The regular re-sync of contacts, calendar and files itself? Shouldn't that be done by the contacts app / calendar app on regular intervalls?

with Fossify apps

I just downloaded fossify calendar on my android a few days ago to test it and got to see the other fossify apps :)

syncthing phasing out android support

Oh man, I already use syncthing for ~5 GB of files and I use it on my android too. Seems I'll be trying syncthing-android-fdroid in the future then.

There are tons of notes apps

There really are a lot! NotallyX looks nice and simple, but memos also looks very interesting. And thank you for the link, I'll go dive into that tomorrow.

The one Google feature I am not able to reproduce is Google Messages

I do not need RCS-compatible messengers. What I send via SMS is nothing more than pure text, also no group chats. I use signal and element for my "fancy" messaging needs :)

I use Tailscale

I'll look into it some more over the next days, but on a quick glance, this seems like it is an online service where you need an account? If that's the case, I'd prefer using my already running OpenVPN server to do the job.

Thank you for the tipp!

Though I gotta ask: would ZFS still bring an advantage, considering that the RAID is going to be managed inside the external RAID enclosure, so ZFS would never see the actual disks? Or did I misunderstand how these enclosures work?

Are the documents you edit with the online editor files which are visible in the online drive? Does nextcloud use the open document specifications for saving documents (e.g. .odt, .ods)? Can you view these files without opening them in the editor (like the preview in google drive)?

If so, that is acceptable. The document thing is more for completion, I don't handle documents all too often. And if the online editor is bad or not working but the files are visible and offline-syncable in the drive to some desktop client and they are using the open document format, I can edit them with libreoffice.

Thanks for the heads-up!

Oh, it's nice to hear somebody already did that, thank you!

Did you have any hiccups or general problems with nextcloud or calendar/contacts/photos sync? Did you do any specific thing to harden security, other than using ufw, fail2ban and changing sshd config?

Thank you for your input!

I also thought about the 3-2-1 backup rule, but am unsure if that is overkill.

My VM-backups and file-level-backups are proxmox backup server (pbs) backups. Meaning, to have them offsite, I'd need to rent a dedicated root server on which I am able to install pbs to act as an offsite sync-target. With TB of backups, this is gonna get very costly very fast.

I thought about regularly exporting encrypted calendar and contacts onto some free online storage, hoping I can automate this process.

With what I have layed out in my post, to lose contacts and calendar events, both my intel NUC and the zotac mini-PC have to be corrupted at the same time. Or both RAIDs simultaniously failing both drives. Am I not paranoid enough or is that an acceptable level of failure-safety?

All of this will be sitting in my living room somewhere, so I'd like to keep the number of devices and the space I need for the setup to a minimum.

I do know Synology has very solid products, but I'd rather do it myself and have full control over the servers. I use Fedora and my VMs all run debian. I also try to deploy as many services as possible with docker, as that makes it very easy to migrate stuff to another machine and test the next version before using it in production, if the need arises.

I have some old mini-PC in my living room that's running a hypervisor and a few VMs. One of those VMs is used for pihole. I used docker and docker compose for this.

My docker-compose.yaml is a little more fancy than that because I deploy it via GitLab CI, but here's the kind of config you can expect:

# More Info and full example docker-compose here:
#   https://github.com/pi-hole/docker-pi-hole/#running-pi-hole-docker
services:
  pihole:
    container_name: pihole
    hostname: pihole
    image: pihole/pihole:latest
    ports:
      - "53:53/tcp"
      - "53:53/udp"
      - "80:80/tcp"
      - "443:443/tcp"
    environment:
      PIHOLE_UID: '1000'
      PIHOLE_GID: '1000'
      TZ: 'YOUR_SERVER_TIMEZONE'
      FTLCONF_webserver_api_password: "YOUR_PIHOLE_ADMIN_PASSWORD"
      FTLCONF_dns_listeningMode: 'all'
    volumes:
      - etc-pihole:/etc/pihole
    restart: unless-stopped

I mostly copy-pasted that from the official pihole docker compose quick-start example.

To update, you would just need to run the following in the same directory as the docker-compose.yml file.

docker compose stop
docker compose pull
docker compose up -d

If pihole is the only thing you really want to run, a new machine and hypervisor are too much for just that. If ad-free surfing is all you want, you can just get a raspberry pi and setup pihole on that thing. You can still use docker compose, as the pihole images are available for ARMv6, ARMv7 and ARM64.