It is impossible to fully eliminate the risk but with a decent backup system in place it is somewhat unlikely to lose all of your data.

The 321rule should be used as a baseline. Your local backup should be snapshotted and somewhat hardened against ransomware (pull backups instead of pushing them, do not mount the backup volume to other machines). Cold backups also help.

Can I construct scenarios in which I lose all my stuff? Sure. But in those, we are either in deep shit anyway (CME, some big astroid) or it is pretty unlikely (targeted hacking)

I’m more scared of online services being discontinued and/or being getting vendor locked and forced to pay ransom on a regular basis. Therefore, I host and back up everything on my own.

A) Make backups B) take them offline.

Aren’t you scared about loosing your data?

No. I still have files from 1991. I’ve got files that have migrated from floppy disk to hard drive to QIC-80 tape to PD (Phase Change) optical disk to CD-RW to DVD+RW and now back to hard drives.

What if I get a ransomwarei don’t realize and all my backups get encrypted too?

Then you need to detect the ransomware before you backup. I use rsync --dry-run and look at what WOULD change before I run it for real. If I see thousands of files change that I did not expect then I would not run the backup and investigate what changed before running the rsync command for real.

Or if the backups are corrupted

I have 3 copies of my data. Local file server, local backup, remote file server.

I also run rsnapshot on /home every hour to another drive in the machine. I also run snapraid sync to dual parity drives in the system once a day.

I generate and compare stored file checksums twice a year across all 3 copies to detect any corruption. Over 300TB I have about 1 failed checksum every 2 years.

and my disks breaks?

If one of my disks breaks I buy a new one and restore from backups.

But also I’m afraid about cloud

I don’t use any cloud services because I don’t trust them.

Follow the 3-2-1 principle and there is less reasons being scared of loosing data.

You SHOULD be scare of losing your data. In fact it’s a very likely outcome if you’re storing data and you don’t know what you’re doing. This is true of every electronic storage format. If you’re not ready to lose everything, you have periodically practice recovery from backup.

Over the years, i’ve met tons of novice computer users who tell me “I’m worried my files will get hacked if I store them on dropbox / cloud”. I always set them straight: the number one risk for you is losing your own data, not data theft, unless somehow your files contain industrial secrets worth hundreds of millions of USD.

I consider myself an experienced computer user and developer, having had various roles that border on sysadmin. I don’t trust myself to run my DIY NAS. For the stuff that matters, you should fear complexity as it 's a source of errors. You should doubt yourself at every step. Practice recovery. This is true for everything. I messed up my pfSense router config this weekend, it wouldn’t boot. I took the opportunity to practice recovering from backed up config (I should have done that much earlier).

Some data are backed up to a local NAS, some of that data is backed up to cloud (not Google or the big ones).

Most of my data aren’t important. Photo library is both local, in the cloud, and most on offsite DVDs.

~45K lossless music files is local and cloud. Those would suck losing, but I could rip them again.

I’ve been considering tape backup again, it’s like 20 years since I used it at home.

I loose my data all over the place.

I loose it here, I loose it there, I loose it all over your mother’s hair.

As far as losing data, I trust myself and my adherence to 3-2-1 more than I trust a third party solution.

321 rule - anything super critical also gets off-sited to the cloud.

No… I have proper, tested backups.

The key is to do regular backups to a different location, and to keep previous versions as read-only backups for a certain timespan. If something happens to the local data you can just restore from the remote backup, and also pick an unmodified previous version in case of a ransomware attack.

E.g. I do a daily encrypted cloud backup of everything that can’t just be downloaded again, and the backup provider keeps previous versions for 30 days.

ZFS (mirrored) two HDDs. If one HDD fails, then replace it and let it rebuild. Use 3 HDDs mirrored if you really think you could get a failure while the array is rebuilding.

Also have two external backups, one you do regularly at home, and another you keep off-site. When you visit that location (be it your parents, siblings, relatives, friends house) swap out your external backup with their off-site to ensure its kept up to date.

Make sure all disks are fully encrypted of course.

For now my server doesn’t have very important data most of it are your “Linux isos” I can just download again and I’m thinking of starting to move my file and photos to the server but in afraid. What if I get a ransomwarei don’t realize and all my backups get encrypted too? Or if the backups are corrupted and my disks breaks? But also I’m afraid about cloud because I’ve seen some posts about people getting their google accounts closed without notice for breaking TOS (maybe they did something wrong maybe not).

What you’re describing sounds like general anxiety. So if you’re asking whether I’m suffering from anxiety, then no :P There are risks in life and precautions you can take against them. I’m just as “scared” about losing data as I am about getting run over by a car, that is to say not at all. Both scenarios are horrible, both can be reduced in risk by employing reasonable countermeasures and behaviors. Beyond that it’s out of my control so there’s no point in worrying.

The only hazy variable in this kind of contemplation is: Am I knowledgeable enough to properly gauge the risks and know the “reasonable countermeasures”? And if you’re asking “Do you know enough?” or “Do you spend enough time learning new things?” then my answer would always be an emphatic “No!” because there’s no such thing as enough knowledge and competence.

My backup strategy:

Data:
- Sycnthing with 1x Copy with my Clients and 1x Copy on my Server accessible via Nextcloud
- Daily Push-Backup with of my Nextcloud-Data-Folder via Kopia to Backblaze
- Daily Pull-Backup of my Nextcloud-Data-Folder via QNAP-NAS in the basement

VM:
- Daily Backup of my VM’s to a Proxmox Backup Server running on QNAP-NAS
- Daily Backup of my VM’s to BackBlaze (but encrypted before)

Still, I’m not fan of having just one Cloud-Backup. So I think I will also get Hetzner Cloud Storage for Borg Backup additional to Kopia.

Goal:
- Different Hardware (Server, QNAP, etc.)
- Different Backup software (Syncthing, Kopia, Borg)
- Different Backup technique (Push, Pull, Snapshots)
- Different Locations

Only thing dear to me is my family photos and videos over the years. They’re backed up to two different cloud providers. Everything else is ultimately downloadable.