Small server backups with restic

For a handful of servers I want backups that are encrypted on the client, cheap to store and simple to restore. restic covers all three.

Initialise the repository once, then back up the directories that matter:

restic -r s3:https://storage.example.net/backups init
restic -r s3:https://storage.example.net/backups backup /etc /srv

Retention is a separate step, so a bug in the backup job cannot delete old snapshots by itself:

restic forget --keep-daily 7 --keep-weekly 4 --keep-monthly 6 --prune

A backup you never restored is only a hope. Once a month I restore one directory to a temporary path and compare it with the original.