Ah, in that case you will probably need to go into the container to do the backup. I avoid mounted volumes.

As your user account, just run something like:

podman volume export VOLUME >backup.tar

Or from another machine, say you want to do a remote backup from your server:

ssh user@host podman volume export VOLUME | zstd -o backup.tar.zstd

You can. I recommend making sure you have logging in place so you know what’s going on. This could include not just service logs but firewall logs as well. You might want to rate limit the connection attempts for SSH and WireGuard and consider Fail2Ban or something similar.