After sleeping on it, here is the current plan.
1. Wireguard and nextcloud server at home.
2. Goes to trusted geodiverse location, Wireguard back to the first, cronjob rsync to create geodiverse backups of the nextcloud data.
Discussion
Hey Bill! I thought this was an interesting project, so I wrote a basic guide for you to get started. Let me know if you have any issues, or I can help more.
Dude you are a champion. I want to set up a home VPN to bounce my phones connection off when I'm on the go, that way I can access my home services locally. The problem I forsee is that my router is set up to send everything through protonvpn, and I enjoy that blanket of security. Is there a good way to do this without TOR? I'm thinking I need a static public IP address that I can tunnel into from my phone, that then forwards any outbound connections through proton/my router. Am I on the right track here? Is any of that even necessary since my home has a static IP as far as my ISP is concerned?
Just a heads up, you'll need to back up the database as well in order to completely mirror Nextcloud.
If you're not worried about the back copy being usable via nextcloud and just want a copy of your files (e.g. to upload them to another Nextcloud instance) rsync will work just fine.
How do I know this? I'm also a Nextcloud admin. 🙂👋
If you want deduplicated, compressed, encrypted, off site backups (yes, you CAN have all of these things!), check out borgmatic (which uses borg backup). Goes over SSH, the backup node never has the ability to decrypt the data, and there are integrity checks so they can't covertly modify contents either. They just have to be trusted with regards to availability.
I'd be happy to answer any questions not covered by the documentation.