1

I have a server that I want to regularly backup. I create backups with encrypted tar using OpenSSL, and now I want to connect to my home server and upload my backed up files there.

I need a mechanism, with which I can connect to my home server, log in, and be able to only upload and read the files there. If my server gets compromised, I don't want the hacker to have access to my home server. So I want the account only to be able to write/read files into only one directory, without even being able to peek on the system files in my home folder.

What's the best transfer mechanism to do that? SSH or FTPS or something else?

Improve this question

1 Answer 1

Reset to default
1

If the server must login to your home server, you could restrict SSH access via chroot. For your usecase however I'd go the other way around: let your home server fetch the backup from the server, so the server doesn't need to login to your home server at all.

Improve this answer

You must log in to answer this question.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.