Rsnapshot (https://rsnapshot.org/), run via cron, nightly, pulling backups from the other machines that need backing up.
The true back-up is dailies (or on demand if appropriate) from the server to an off-site backup service. All data already encrypted on our side before it leaves the building. We take some measures to ensure consistent snapshots, including for tricky applications like databases and source control repositories where a filesystem-level snapshot may be insufficiently robust.
IMHO, the most important thing about backup is that it always backs up everything. Too many applications and setups fail silently.
File History + Backblaze on Windows.