Restic and BorgBackup really seem to be the favored solutions out there. Restic for encryption, Borg for deduplication and compression. Or maybe bacula if you want pull based backups instead of push based.

https://restic.readthedocs.io/en/stable/

https://www.borgbackup.org/

https://www.bacula.org/documentation/documentation/

'borg'[1] has, in recent years, become the de facto standard for secure, encrypted, you-control-the-keys backups. It has been referred to as "the holy grail of backups"[2].

Two of the better howtos that we have seen for borg are [3][4]. [4] is geared toward OpenBSD users.

[1] https://borgbackup.readthedocs.io/en/stable/

[2] https://www.stavros.io/posts/holy-grail-backups/

[3] https://jstaf.github.io/2018/03/12/backups-with-borg-rsync.h...

[4] https://rgz.ee/borg.html

There is also https://github.com/restic/others which has some keywords (e.g. is it encrypted, does it do compression) for most FOSS backup solutions. It can be outdated or incomplete for some entries, though.

When talking about backups for nerds, https://www.rsync.net/ always deserves a mention.