I have made a setup that I am really proud of.
Syncthing + Tailscale + old Raspberry Pi + external USB SSD disks + restic for backup + B2
Raspberry Pi OS + syncthing data is on one SSD disk (encrypted)
Restic backs up to second SSD disk (encrypted) and a separate (encrypted) backup is sent to B2