Comment by normie3000

Having run litestream in prod for 2+ years, I share all of these concerns.

> It seems like the thing getting backed up shouldn’t have the privilege of deleting backups in case it gets compromised.

For backups, I added a nightly cron job which exports my SQLite db to a write-only S3 bucket.