Table of Contents

  1. Table of Contents
  2. What do I want backed up
  3. Project setup
  4. Project todo
    1. SFTP server taks
      1. SFTP setup
      2. CIFS setup

What do I want backed up

  • secure vault photos , pictures ,
  • everything in gallery
  • contacts
  • samsung notes.

Project setup

  • FTP server installed on LXC container hosted on proxmox
  • FTP client installed on android phone
  • forwarded port in eero router
  • IPv4 Policy for SFTP in firewall.

Project todo

  • install fdroid on android phone
  • setup android FTP client
  • setup LXC container
  • connect android to sftp server
  • copy files to SMB share
  • rclone copy files to cloud share

SFTP server taks

SFTP setup

  • create user for android client on sftp server
  • configure android user to not login
  • restrict permissions to singular directory where files will be copied
  • only allow android user to read+write to storage location and nowhere else
  • configure ssh port to 5160
  • install firewalld
  • make sure openssh is installed
  • add ssh to firewall-cmd services
  • generate ssh key for server
  • install terminus on android
  • generate ssh key for android phone

  • copy ssh key to server

  • copy ssh key to servers authorized_keys
  • disable password based auth after android public key has been added
  • add sftp service port to firwall-cmd
  • start SFTP daemon on LXC container
  • only allow trusted IP from android phone ?
  • add sftp port 5160 to ipv4 policy in fortigate
  • add sftp port to forwarding in eero router.

CIFS setup

  • copy over fstab from another container
  • install cifs-utils
  • add cifs to firewall-cmd