{"id":1023,"date":"2025-01-31T13:54:18","date_gmt":"2025-01-31T13:54:18","guid":{"rendered":"https:\/\/virtualall.sk\/?p=1023"},"modified":"2026-09-11T14:45:17","modified_gmt":"2026-09-11T14:45:17","slug":"veeam-hardened-repository-bezpecne-ulozisko-pre-moje-zalohy","status":"publish","type":"post","link":"https:\/\/virtualall.sk\/en\/2025\/01\/veeam-hardened-repository-bezpecne-ulozisko-pre-moje-zalohy\/","title":{"rendered":"Veeam Hardened Repository"},"content":{"rendered":"\n

V r\u00e1mci ochrany z\u00e1loh som sa rozhodol nastavi\u0165 Veeam Hardened Repository<\/strong>. Pre\u010do? Preto\u017ee z\u00e1lohy s\u00fa \u010dasto cie\u013eom ransomv\u00e9rov\u00fdch \u00fatokov a bez spr\u00e1vnej ochrany m\u00f4\u017eem pr\u00eds\u0165 o d\u00f4le\u017eit\u00e9 d\u00e1ta. Veeam pon\u00faka rie\u0161enie, ktor\u00e9 mi umo\u017e\u0148uje chr\u00e1ni\u0165 z\u00e1lohy tak, aby ich nebolo mo\u017en\u00e9 zmeni\u0165, vymaza\u0165 ani za\u0161ifrova\u0165<\/strong> \u2013 a pr\u00e1ve to potrebujem.<\/p>\n\n\n\n

\n\n\n\n

\u010co je Veeam Hardened Repository?<\/strong><\/h2>\n\n\n\n

Veeam Hardened Repository<\/strong> je \u0161peci\u00e1lne nakonfigurovan\u00e9 \u00falo\u017eisko na Linux serveri<\/strong>, ktor\u00e9 vyu\u017e\u00edva nezmenite\u013en\u00e9 (immutable) z\u00e1lohy<\/strong>. To znamen\u00e1, \u017ee ke\u010f raz vytvor\u00edm z\u00e1lohu, nikto \u2013 ani \u00fato\u010dn\u00edk, ani administr\u00e1tor (vr\u00e1tane m\u0148a)<\/strong> \u2013 ju nem\u00f4\u017ee zmeni\u0165 alebo vymaza\u0165 po\u010das definovanej doby<\/strong>.<\/p>\n\n\n\n

Toto \u00falo\u017eisko je navrhnut\u00e9 tak, aby odolalo ransomv\u00e9rov\u00fdm \u00fatokom, chyb\u00e1m administr\u00e1tora alebo z\u00e1mern\u00fdm pokusom o zmazanie z\u00e1loh<\/strong>.<\/p>\n\n\n\n

\n\n\n\n

Pre\u010do som si vybral Hardened Repository?<\/strong><\/h2>\n\n\n\n

\u2705 Nezmenite\u013en\u00e9 z\u00e1lohy (Immutable Backups)<\/strong> \u2013 Z\u00e1lohy s\u00fa chr\u00e1nen\u00e9 proti vymazaniu alebo \u00faprave po ur\u010dit\u00fa dobu.
\u2705 Bezpe\u010dnos\u0165 bez potreby \u010fal\u0161ieho softv\u00e9ru<\/strong> \u2013 Nemus\u00edm in\u0161talova\u0165 \u017eiadny \u0161peci\u00e1lny agent, sta\u010d\u00ed spr\u00e1vna konfigur\u00e1cia Linux servera.
\u2705 Ochrana pred ransomware<\/strong> \u2013 Ani malv\u00e9r, ani hacker nem\u00f4\u017ee za\u0161ifrova\u0165 z\u00e1lohy.
\u2705 Kompatibilita so \u0161tandardn\u00fdmi protokolmi<\/strong> \u2013 Pou\u017e\u00edvam XFS so zapnut\u00fdm Fast Cloning<\/strong>, \u010do mi \u0161etr\u00ed \u00falo\u017eisko a zr\u00fdch\u013euje syntetick\u00e9 full z\u00e1lohy.
\u2705 Jednoduch\u00e1 implement\u00e1cia<\/strong> \u2013 Nastavenie nie je zlo\u017eit\u00e9, sta\u010d\u00ed dodr\u017ea\u0165 nieko\u013eko krokov.<\/p>\n\n\n\n

\u010co Veeam Hardened Repository potrebuje?<\/strong><\/h2>\n\n\n\n

\ud83d\udd39 Linux server<\/strong> \u2013 Mus\u00ed podporova\u0165 XFS a reflink.
\ud83d\udd39 Z\u00e1kaz root pr\u00edstupu cez SSH<\/strong> \u2013 Kv\u00f4li bezpe\u010dnosti.
\ud83d\udd39 Nezmenite\u013enos\u0165 aktivovan\u00e1 (Immutable backups)<\/strong> \u2013 Nastavil som reten\u010dn\u00fa politiku (napr. 14 alebo 30 dn\u00ed).
\ud83d\udd39 Spr\u00e1vne sie\u0165ov\u00e9 a proxy nastavenia<\/strong> \u2013 Ak server nie je v rovnakej sieti, mus\u00edm dorie\u0161i\u0165 pr\u00edstup.
\ud83d\udd39 Pridanie NTP servera<\/strong> \u2013 Aby sa predi\u0161lo probl\u00e9mom so synchroniz\u00e1ciou \u010dasu.<\/p>\n\n\n\n

In\u0161tal\u00e1cia<\/h2>\n\n\n
\n
\"In\u0161tal\u00e1cia\"<\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n

\n
\"In\u0161tal\u00e1cia<\/figure>\n<\/div>\n\n\n

<\/p>\n\n\n

\n
\"In\u0161tal\u00e1cia<\/figure>\n<\/div>\n\n\n

Heslo mus\u00ed sp\u013ana\u0165:<\/p>\n\n\n\n

\u2705 Minim\u00e1lne 15 znakov<\/strong>
\u2705 Aspo\u0148 1 ve\u013ek\u00e9 p\u00edsmeno<\/strong>
\u2705 Aspo\u0148 1 \u010d\u00edslo<\/strong>
\u2705 Aspo\u0148 1 \u0161peci\u00e1lny znak (^<\/code>)<\/strong>
\u2705 Nie viac ako 3 rovnak\u00e9 znaky za sebou (mal\u00e9 p\u00edsmen\u00e1, ve\u013ek\u00e9 p\u00edsmen\u00e1 alebo \u010d\u00edsla)<\/strong><\/p>\n\n\n\n

\"In\u0161tal\u00e1cia<\/p>\n\n\n\n

<\/p>\n\n\n

\n
\"In\u0161tal\u00e1cia<\/figure>\n<\/div>\n\n\n

V konfigur\u00e1tore Veeam Hardened Repository<\/strong> nastav nasleduj\u00face mo\u017enosti pod\u013ea po\u017eiadaviek:<\/p>\n\n\n\n