I may be missing something in your use case. As long as you have the port forwarded you can decrypt from anywhere. Use pub key auth and you’re good to go
I may be missing something in your use case. As long as you have the port forwarded you can decrypt from anywhere. Use pub key auth and you’re good to go
You can decrypt via ssh at boot. I used dropbear to accomplish that on my machine
Brand recs? The ones I have aren’t great
I recently switched from Joplin to Obsidian for different reasons. I’d prefer something FOSS, but so far I’ve been happy with the transition. Since it works with plain markdown files, it would fit your use case
Interesting idea, but it sounds computationally expensive which could pose problems. Smaller, hardware-restricted servers would be less viable
Worth noting that certain clients such as the PS4 and PS5 apps have terrible format support and will result in transcoding if you’re storing, say, MKVs. Something to look out for, but everyone else in this thread is on the money: don’t worry too much about performance at this stage. That’s a bridge you cross if and when you reach it
Fair enough. Every service I run depends on encrypted data, so starting the machine without decrypting isn’t worthwhile in my case. I have to decrypt to get everything back up after power loss anyway.
Main advantages I’m aware of for full disc encryption are encrypted swap and system config. Overkill for some use cases so YMMV, but wanting to point out that decrypting at boot can be done.