Simple suggestion, have it set up so that:
- the transporter runs every morning
- it saves to a specific folder
- it only keeps the last 5-10 backups
- it should be configured as a secure samba share, so that users can create off-device backups regularly.
What this would also allow us to do, is create a "recovery mode" page in the webui, and revert to settings we knew worked from a day or two ago. Kinda stealing the idea from M$ Windows.
I would also suggest that this include lighttpd conf.
What the recovery mode would then do, is git reset --hard and then restore files from the selected backup.