I threw a NAS in a friends house that is configured to bootup and reverse ssh tunnel to my rack where it then accepts scheduled encrypted duplicity backups.

I do not even need to trust my friend as duplicity encrypts all data against a yubikey held pgp keychain before it leaves.

The backup NAS could phone home from anywhere with internet access.