everybodyknows parent
Great attention to security -- but what is your strategy for backup, as preparation for recovery from loss of the hardware?
I wrote my own python wrapper around Rustic and RClone to achieve 3-2-1 file-level backups: https://github.com/AlphaJack/rusticlone/.
I first tried Rustic's native RClone support, but performance were awful. Backups are automated and run on a daily basis. To restore all my repo (or just one) I run a single command, if I have the repo configs in place.
To backup the repo configs I manually make a second backup by putting them, among all other configurations for my devices, in an encrypted .7z archive, which I upload in a remote cloud storage.
To reinstall Arch, I turned my notes into an automated script that does that in few minutes. The guide in the post derives from it, so it's quite up-to-date.