I'm planning a home backup setup, and I'm not sure if I really understand this quite right.
The idea is I'll set up a Linux server on the network that contains two drives. Drive1 will be network-accessible and used as a backup location for several other machines on the network as well as a general file share. Drive2 will not be network accessible, only the host OS will be able to access it, and will serve as a target location for duplicity to store incremental backups of Drive1.
My understanding is: in case of ransomware on any of the various client machines on the network (that have write access to Drive1), that machine as well as Drive1 will be hosed, but the backups of Drive1 should be safe, since only the server will have write access to Drive2 (assuming the server isn't infected and duplicity is set up to write changes, not erase existing backups).
Is that accurate?