So for transparency sake for the backups we are using dockerized restic with a script that dumps the database and encrypts and uploads to backblaze b2 for us automatically at 5am UTC.
I have it configured currently to
- Keep the last snapshot.
- Keep the last 7 daily snapshots.
- Keep the last 4 weekly snapshots.
- Keep the last 3 monthly snapshots.
- Keep the last yearly snapshot.
So we have a nice range of restore points if needed.