Hi all,

I’m running a home server on Proxmox, hosting services for my family (file/media storage, etc.). Right now, my infrastructure is VM-based, and my backup strategy is:

Proxmox Backup Server to a local ZFS dataset

Snapshots + Restic to an offsite location (append-only) - currently a Raspberry Pi with 12TB storage running a Restic RESTful server

I want to start moving workloads into Kubernetes, using Rook Ceph with external Ceph OSDs (VMs), but I’m not sure how to handle disaster recovery/offsite backups. For my Kubernetes backup strategy, I’d strongly prefer to continue using a Restic backend with encryption for offsite backups, similar to my current VM workflow.

I’ve been looking at Velero, and I understand it can:

Backup Kubernetes manifests and some metadata to S3

Take CSI snapshots of PVs

However, I realize that if the Ceph cluster itself dies, I would lose all PV data, since Velero snapshots live in the same Ceph cluster.

My questions are:

How do people usually handle offsite PV backups with Rook Ceph in home or small clusters, particularly when using Restic as a backend? 1.

Are there best practices to get point-in-time consistent PV data offsite (encrypted via Restic) while still using Velero? 1.

Would a workflow like snapshot → temporary PVC → Restic → my Raspberry Pi Restic server make sense, while keeping recovery fairly simple — i.e., being able to restore PVs to a new cluster and have workloads start normally without a lot of manual mapping?

I want to make sure I can restore both the workloads and PV data in case of complete Ceph failure, all while maintaining encrypted offsite backups through Restic.

Thanks for any guidance!