Skip to content

Instantly share code, notes, and snippets.

@motiejus

motiejus/safe.rst

Last active August 29, 2015 14:01
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save motiejus/6d8a843e08b8f2ad8d61 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save motiejus/6d8a843e08b8f2ad8d61 to your computer and use it in GitHub Desktop.
Download ZIP
Safe by default
Raw
safe.rst

Safe by default

This post documents my envisioned state of digital asset storage and maintenance. Most of the stuff is already implemented, so this page is a reminder for me what the final state should be.

Inspired by musings from Colin Percival.

Archive and backup all personal stuff

  1. Archive using git-annex and hard drives at home.
  2. Backup all hard drives and laptop using tarsnap.

Levels of private information sensitivity and handling:

  1. Non-sensitive private information: pictures, documents.
  2. Sensitive information used daily: GPG subkeys, tarsnap keys, ssh keys, spiped keys.
  3. GPG master key: multiple offline physical locations.

Categories 1 and 2 are backed up in different physical locations (including tarsnap). Category 3 is in offline (digital and print) storage only.

I do not archive things that can be downloaded from the internet.

Secure personal servers

  1. All servers and services are self-configuring; (CloudInit style)
  2. All services are isolated. LXC is a bit too young, there are no settled practices; most likely Jails in FreeBSD.
  3. Permit SSH access through spiped only and close port 22 on all always-on machines.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment