A layered backup design for Unraid, application configs and remote Linux hosts, ending in an encrypted off-site repository.
Unraid creates dated snapshots for its flash configuration and selected application configuration. SQLite-backed services are copied using consistent database backups rather than raw live-file copies.
A Raspberry Pi, Tailscale subnet gateway and DNS VPS expose narrowly scoped export scripts. Unraid reaches them with dedicated SSH keys and jump-host paths where needed.
Restic encrypts and deduplicates the local recovery set before rclone transfers repository objects to Google Drive. Automation keys and the repository password are excluded from the cloud source.