Purely a hypothetical for me; I don't have the means for a VPS or that many files. But in the future, if I'd want to use the 3-2-1 rule with a VPS subscription, what sort of software would I need to ensure that my files can't be accessed on the VPS and need off-site decryption keys? What kind of setup would allow you to access said files from a different device if the decryption keys are stored locally on it? People who've done something similar, how has that gone for you?

https://www.borgbackup.org/

Not only does borg have strong encryption, it also has git-like incrimental versioning and insanely good compression and de-duplication.

For example, I backup my whole 700GB OS drive (personal data + the whole linux OS install with all my tweaks and configs) - I set it to keep the last 15 "snapshots" (7 daily, 4 weekly, 3 monthly, 1 yearly) and all it takes on the borg server is 800GB.

I like using borgmatic for automatic borg backups, but it's optional.

rclone crypt

I think a lot of backup programs offer encrypted backups. You enable that and it gets encrypted before being transferred to the remote machine.

This using object storage duplicated on two separate services.

If you like a GUI, Vorta is great.

Restic is incredible fast and encrypted.

What are you paying for 800gb?

This is the way

@AlThePilcrow@lemmy.blahaj.zone I'm using restic to backup my NAS to a Hetzner storage box. (1TB for ~€3/month)

It's easy, and you can SSH into the box to verify what's actually there.

Backing up linux is cheating as it can be compressed heavily.
I can backup my whole linux install on Veeam Backup and Replication about 2-3x for the full backup on optimal.

Restic's dedupe is very good. I used to take uncompressed tars of whole systems and it would add only megabytes to the storage repo each time. Almost everything got deduped despite being in various tar files and very fast.