Infrastructure 06.6 — Object storage

S3 storage and remote retention

S3-compatible storage — for backups, archives and applications. Your own MinIO server, or a third-party provider (Backblaze B2, Cloudflare R2, Wasabi, AWS) — your choice.

S3
API compatibility
2sites
Local + remote
∞
Versions

S3 storage / capabilities

What it covers

MinIO or a third-party provider (B2, R2, Wasabi, AWS), bucket structure, versioning and replication.

MinIO / S3

Your own object storage with the S3 API — compatible with every modern application.

Backup target

Proxmox Backup Server, Veeam or scripts — straight to S3, encrypted.

Bucket structure

Logical separation by project, client and type — not one giant container.

Versioning and lifecycle

Old versions are kept while expired ones are removed automatically — space does not fill up forever.

Hybrid and third party

Your own MinIO locally plus Backblaze B2, Cloudflare R2 or AWS remotely — the same S3 API.

Access keys

A separate key per application, with minimal permissions and a rotation plan.

process

How the process runs

  1. 01

    Volume

    How much data, how fast it grows and what must be instantly available.

  2. 02

    Topology

    Where the primary storage lives and where the replica goes, accounting for network links.

  3. 03

    Build

    Installation, buckets, policies and encryption.

  4. 04

    Operate

    Monitoring, health checks and capacity forecasting.

cases

Examples

Backup

Offsite target for PBS

Daily copies straight to S3 — a failed local disk is no longer a problem.

Archive

A media archive across years

Versioning and lifecycle rules — old files cheap, new ones fast.

Providers

Own storage or a third party

S3 is one standard — so every provider works the same way. The question is not compatibility, but price, location and how much physical control you want.

MinIO

Self-hosted

Full control and zero per-gigabyte fees. The best option if you already have a server or Proxmox.

  • Full data control
  • No traffic limits
  • You buy the disk once

Consider Physical responsibility is yours — fire, theft, disk failure.

Backblaze B2

Cheap offsite

The cheapest remote option for backups. Ideal as a second location alongside a local MinIO.

  • Low price
  • Free egress via Cloudflare
  • Simple PBS integration

Consider Minimum retention billing and fewer regions.

Cloudflare R2

Zero egress

If you already use Cloudflare for DNS, R2 is the natural extension — no charges for reads.

  • Zero egress
  • One panel with DNS
  • Full S3 API

Consider Data sits on Cloudflare infrastructure — unacceptable for some clients.

AWS S3

Enterprise standard

When you need audits, compliance or Glacier deep archive. The most expensive, but the most flexible.

  • Full compliance
  • Glacier archive
  • Many regions

Consider Egress is expensive — frequent reads get costly quickly.

Wasabi

Flat pricing

A flat monthly price per terabyte, ignoring traffic — predictable cost.

  • Predictable cost
  • Fast access
  • Simple billing

Consider A minimum storage period and a 90-day policy.

I configure any combination: MinIO locally plus B2/R2 remotely, or a third party only. Data is always encrypted before it reaches storage.

faq

Common questions

Where is the storage hosted?

On your server or on my infrastructure — in both cases only you have access.

Can we use a third-party provider?

Yes — MinIO, Backblaze B2, Cloudflare R2, Wasabi or AWS. I also set up hybrids: local MinIO plus remote B2/R2 replication.

Does the provider get my data?

Copies are encrypted client-side before they reach storage — the provider sees only ciphertext, the key stays with you.

Is it encrypted?

Yes — TLS in transit, and copies are encrypted client-side before they reach storage.

Need backups in two places?

I will prepare the storage structure and a replication plan.

Let’s talk

Contact

Get in touch about your technical task

Contact me by phone or WhatsApp. Critical incidents are covered 24/7; other requests are handled within the agreed support schedule.

24/7 on critical incidents — Response mode

If I miss your call, I will get back to you.