A vendor requested a complete backup of a server for troubleshooting a bare metal restore issue, but they said we are free to exclude any sensitive data.
I’m thinking I’ll exclude:
- exim.conf (it contains a password / API key)
- any SSL private keys and SSH private keys of concern
Does this seem good or is there anything else important I'm missing? I know the answer depends on what's on the server / what it's being used for, but I imagine there might be some good general "be sure to think of ____" responses.