I cannot recommend borgmatic highly enough for this. Automatic backups, compressed, encrypted, deduplicated, the ability to go back in time to get the copy of that config file from last Tuesday... it has it all.

Just set up one container/VM with a good amount of disk space and send all your bsckups there.

Next level is setting up your servers with Ansible, which rolls out config files, decrypts secrets and stuffs them into your configs, and gets you a nice fresh install as quickly as possible. It's easy to test, and is an excellent tool for testing changes and keeping track of change management.