- Do not allow server A to have implied
sshaccess to server B, nor allow server B to have impliedsshaccess to server A. Different passwords. No certificate-based logins. No trust. - Set up
rsyncas a dæmon on server A such that it offers read only access to the backups, and only from server B. Not overssh, but directly. - Have server B copy the backups periodically with
rsyncfrom server A. (Notrsyncoverssh, but using thersynctransport protocol) - Use a VPN or something like
stunnelto protectrsynctraffic between server A and server B.
↧
Answer by roaima for Automatic and secure file transfer over two servers
↧