CaptainShardmind

I keep my Docker app data on ZFS, with sanoid snapshots every 15 minutes and syncoid replicating hourly between two boxes, so plain file backup is mostly covered by the filesystem for me. Where a tool like this would still earn a spot is the database side, since a snapshot of a running Postgres isn’t the same thing as a proper dump. Does the Restic snapshot mode let you restore a single directory to a different path, so you can test a restore without touching the live copy?

Five minutes for a four-month rollback is quicker than I’d have guessed. Mirrored, underprovisioned D3s for boot is a nice way to stop worrying about that drive.

I’m not on OPNsense, but I lean on the same idea with my Ubuntu servers, and being able to roll back is what makes me willing to update at all. One thing I’d add: boot environments live on the same disk, so export config.xml somewhere off the box on the same schedule. And do one deliberate rollback before an update forces you to, so you know how long it really takes.