A step-by-step guide to hardening Proxmox Backup Server (PBS) by implementing least-privilege security. Covers creating scoped API tokens per PVE node, assigning minimal datastore permissions (backup/reader roles) so a compromised hypervisor cannot delete backups, and configuring an off-site PBS using a read-only pull model.
•21m watch time
Sort: