R2 storage

How do you protect server backups if the source server is compromised?

I currently use restic to back up each server to an R2 bucket every hour. The credentials on each server are limited to reading and writing objects in…