Append-only backups with restic and rclone

The goal of this guide is to convert regular restic backups via SFTP to support append-only backups. Then the SFTP setup must be changed to permit regular SSH logins (this prevents the easy use of chroot with ) and the following force command must be configured for (normally in ):

This way each login of with this key will forcibly run with the flag, preventing modification and removal of files. This leaves only the modified backup command:

This tells to use the backend with the given ssh command.

Source: ruderich.org