How to keep more snapshots on the replication target than the source?

Why that? An SSH connection with public key authentication is as secure as any VPN.

And Hetzner Helsinki, that’s EU, GDPR, as trustworthy as can be :wink: We have a large storage server at their location, too.