Great setup! What WAF are you using?

That would be the idea, but then my friend would need to have a server running at his place. And there is still the problem of how to transfer the data securely over the network to my friend, without poking (too many) holes in the firewall

I am also struggling with off-site backups. Mainly because I don't have a cheap and regular way of doing it.