3.5 Local encryption

You can easily replace > someserver.tar with additional processing. For example, if you want to encrypt the archive file, then you can use | gpg -e -r dude@backupserver > someserver.tar.encrypted as the last part of the command.

It is always a good idea to encrypt archive files, just in case. Refer to module 0160 for more details. You can safely encrypt on the side of the backup server itself because SSH is an encrypted protocol, there is no need to encrypt on the side of the server to be backed up.

As a reminder, do not store the private key on the back up server itself. Otherwise, if the server is compromised, the encryption means nothing!