I do LUKS over https right now. The secret is to pass keyfile for decrypt as sh script that calls curl and echos the passkey back.

https://nowicki.io/self-hosting-lvm-raid1-with-key-over-ftp/

So far it never happened but just in case I always leave one of my keys at some neighbors. I do it anyway because if something happens like broken pipe, it’s good when someone can just enter home without destroying our doors.

Borg + hetzner backup storage (that supports Borg and rsync but I use Borg so my backups are encrypted)

Looks like it is an actual LanguageTool server so it uses all the clients from them. They have tons of integrations that help a lot.

Source: using 3 languages every day while one of them I’m still shit and need this tool to not look like an idiot with no grammar

Check Borg documentation. Somewhere there there’s a way to pass the password as an environmental variable.

Here’s my way of doing it. TLDR: LUKS with a encryption key hosted in my router

https://nowicki.io/self-hosting-lvm-raid1-with-key-over-ftp/

I keep my drives encrypted with a key currently hosted in my router hoping they wouldn’t steal that. I’m thinking of actually putting it to cloud so I can disable it remotely.

It was quite a ride to make everything work and I made a blog post explaining it so I remember what I did.

https://nowicki.io/self-hosting-lvm-raid1-with-key-over-ftp/

So it was DNS?