Backup and restore
One passphrase-encrypted archive captures the whole system — database, configuration and encryption keys — on a schedule, to your remote storage. Restore stages the archive and applies it on restart.
Skeleton — this outline is the writing plan; content lands in the docs phase.