My current infrasturcure looks like on hosted server with docker containers running and one hosted server with a lot of data storage
Backups are done every day
Backups are made of the databases and docker volumes
The two servers are connected via a Wireguard-VPN and the backup server is not available from the outside (secured via iptables) the docker host has only a few ports available by the outside