Ransomware configuration

What is the best recomendation or configuration in the nethserver

Regular backups to someplace off the Nethserver. Alternatively, a manual ZFS setup with scripting to handle automatic snapshots.

And the backups should also be version controlled for an extra layer safety net