Well I think she amount of caution is still appropriate no matter how much you manage to secure the local machine

Yes that sounds like pull backups, which is worth exploring

That’s an interesting idea

Yep offline backups are useful, although it does require remembering & making the effort to do it each time

Certainly sounds relevant, although overall it is quite a different approach than in currently using

For doing snapshots did that means the local system identifies the changes? Or it all gets copied each time?

Yes that seems like one way to go. Although I am using rsync so maybe keeping the files in place and changing owner could be an option

That’s some good suggestions and a few things I hadn’t considered. A VPN is also possible, although setting up the port forwarding might be a bit more complicated

It’s for a home network, I managed to get it working using port forwarding through SSH thanks to suggestions. I’m not sure what the difference is with using the pi as an entry/exit node, that is what I was trying to do with the SSH forwarding. VPN is also possible but it it would also need to be set up to go through the pi

That worked thanks, I didn’t know you could put an address like that in the -L command, and the -N is correct here too

Ok there is a TV and a pi on network 1 and a server on network 2, the pi can connect to the server through SSH or VPN or whatever is needed. The TV would like to connect to the server, however it can’t run a VPN or anything like that so exposing the server would be a risk.

The SSH command on the pi is SSH -L 1234:localhost1234 remote_server

The ufw command was run on the pi, with the intention to allow the TV to access the forwarded port on the pi