https://ericalexander.org/post/devops-and-ransomware/
I also have an offline machine that I turn on from time to time to sync all the data and then I turn it off again.