I have setup a backup server which pulls data using rsnapshot from my server. rsnapshot is running as root on backup machine and connects to the server via RSA key that has no passphrase. My concern is that this may not be a good securitywise. If attacker gains access to my backup machine, he can compromise my backups and server data too.
The question is How should I do this right?
Another thing I'd like to know is:
How can I track rsnapshot activity, to make sure backup successfully finished and there were no problems?