What is the recommended architecture for off-site backup?

Note that Duplicati2 is still under development. The latest beta is old, despite its release date. There are several serious issues to resolve before the next beta. So be sure Duplicati is not your primary backup system. It can be a secondary system, so you get used to it before a proper release is published.