trying to set up backup service

[Pierre A. <ph...@ph...>]

I'm trying to set up a backup service where the repository cannot decrypt the 
backup, but the user can. So far the script looks like this:

#!/bin/bash
rsyncrypto -v -r /home /backup/home /backup/homekey /backup/cert.crt
rsyncrypto --trim=0 -v -r / /backup/root /backup/rootkey /backup/cert.crt

The secret key has a password.

Where should the keyfiles, the certificate public key, and the certificate 
private key be placed?

When I run rsyncrypto on root, it conks out in /bin, saying "Unhandled file 
type", apparently on encountering a symbolic link. Will this be fixed?

/backup is a separate partition. Can rsyncrypto be prevented from encrypting 
it when told to encrypt the root partition?

phma