rest-server VS filemanager

Similar here. Termux with restic, so it does deduplication and encryption and such (also compression since a few months but haven't turned it on yet).

On local laptop: run https://github.com/restic/rest-server/ to accept the incoming data, then (if 1234 is the port that rest-server runs on):

    user@laptop:~$ ssh -R 1234:localhost:1234 root@phone

I use restic to a cloud storage provider and restic-server to another nas. I used hyperbackup for a long time but proved to not be flexible enough and I wanted to get away from a proprietary backup that could only be restored on another Synology.

Have a look at restic and restic-rest-server.

Min.io is just one of the supported storage backends. If you prefer, the restic rest server seems to be supported and might be easier to host. https://github.com/restic/rest-server

restic with rest-server

This one is quite unclear:

> We have added checksums for various backends so data uploaded to a backend can be checked there.

What do you mean checksums? All data is already stored in files with as filename the sha256sum of the contents, so clearly it's all already checksummed and can be verified right?

Looking into the changelog entry[1], this is about verifying the integrity upon uploading:

> The verification works by informing the backend about the expected hash of the uploaded file. The backend then verifies the upload and thereby rules out any data corruption during upload. \n\n [...] besides integrity checking for uploads [this] also means that restic can now be used to store backups in S3 buckets which have Object Lock enabled.

Object lock is mentioned in passing (and only in this more detailed info) but this is a big one. S3 docs:

> Object Lock can help prevent objects from being deleted or overwritten for a fixed amount of time or indefinitely.

i.e. ransomware protection. Good luck wiping backups if your backup host refuses to overwrite or delete the files. And you know the files are good because they match their hash.

Extortion is still a thing, but if people would use this, it more-or-less wipes out the attack vector of ransomware. The only risk is if the attacker is in your systems long enough to outlast your retention period. Did anyone say "test your backups"?

For self-hosting, restic has a custom back-end called rest-server[2] for that which supports a so-called "append-only mode" (no overwriting or deleting). I worked on the docs for this[3] together with rawtaz and MichaelEischer to make this more secure, because eventually, of course, your disks are full or you want to stop paying for legacy data on S3, and an attacker could have added dummy backups to fool your automatic removal script into thinking it needs to leave only the dummy backups. Using the right retention options, this attack cannot happen.

Others are doing some pretty cool stuff in the backup sphere as well, e.g. bupstash[4] has public key encryption so you don't need to have the decryption keys as a backup client.

[1] https://github.com/restic/restic/releases/v0.13.0

[2] https://github.com/restic/rest-server/

[3] https://restic.readthedocs.io/en/latest/060_forget.html#secu...

[4] https://github.com/andrewchambers/bupstash/

The append-only mode can be implemented using https://github.com/restic/rest-server or services like rsync.net that offer read-only zfs snapshots. Doesn’t solve the asymmetric crypto of course.

But how is that better than running the REST server which is also an HTTP-based API? Or is it? I suspect the answer is going to be system dependent but I am curious.

File Browser

Thanks for sharing. I wasn't aware of dufs and it looks very solid. Fileserver[0] is another popular choice, though it's more GUI-oriented for file operations.

[0]: https://filebrowser.org/

The OnlyOfffice desktop app is a pretty good and free alternative to Microsoft Office Suite. You can simply install it on your local machine for offline access.

OnlyOfffice is also self-hostable as a web app for a cloud alternative to Google Sheets.

Filebrowser is a self-hostable alternative to Google Drive.

There's a pull request open to integrate OnlyOffice with Filebrowser for self-hosted google-drive + google docs.

https://github.com/filebrowser/filebrowser/pull/1420

For strictly local use, Google's Nearby share is technically FOSS but the documentation is basically non-existent and a proper Linux implementation is not here yet. Alternatives aren't hard to find though, with Mint's Warpinator or KDE Connect having worked well for me.

For non-local use (everything out of Bluetooth range), you almost have to trust a third party and it really depends on your use case. Want to send your friend a file or host pictures of your birthday for multiple people to download? For the former magic wormhole works great, for the later you could almost spin up a nextcloud or similar (personally I like https://github.com/filebrowser/filebrowser ). Want to regularly send files from device 1 to device 2? Now classic sync solutions like syncthing become really viable.

If everything else fails, FTP always has your back

I have been looking for a file browser which can run in game mode and is reasonably user friendly for simple file operations (copy/delete/rename, etc). Most people recommend Dolphin. it does work but there are issues: the color scheme looks really weird in game mode. context menu does not like game mode, either. Got file browser working (https://github.com/filebrowser/filebrowser) in game mode, which essentially an Edge app accessing a web server on localhost (running as user service). It took some time to set up but the end result is exactly what I would like to have.

File Browser - For access to the files on my NAS

filebrowser has user management plus sharing capabilities

Filebrowser suppports multiple shares with different expiration dates. It also offers file previews and generates QR Codes for the shares.

NextCloud is great for this, but if we're talking sharing files from your sync'd project collection, I'd probably instead recommend Filebrowser. You can point it to the same data store that syncthing is using and it'll make it easy to share the projects. Note that in order to do this you'll need to open up and expose filebrowser publicly. The simplest way to do this would probably be a cloudflare tunnel and for sharing files like this ad-hoc I don't see any issues with their TOS. For things like SyncThing though you'll still wanna do conventional port forwarding. the DIY approach instead of CloudFlare tunnel would be to port forward, set up a dynamic dns record, and set up letsencrypt certs