DeckPacker

Yeah, I now do that aswell.

I learned from my mistakes

I tested mine involuntarily. I enabled full disk encryption on my the main drive of my server, ignored all the warnings and then noticed, that the whole drive was formatted.

Luckily, all the important data was in my backups, I lost some compose files and the database of my paperless ngx seems to be broken (although theoretically, I am shire I could recover that data, I just don’t have that time and there is nothing that important on there).

Actually, they seem to have a tls-passtough mode, which would allow me to handle encryption myself

That is a cool idea, but unfortunately, I don’t know anyone, that would be willing to do this. One of my friends has a selfhosted server, but he doesn’t want to pay for stuff like that. He uses everything through a VPN, so he has no running costs.

I did just come up with a pretty good solution though. I looked into Netbird and they actually have tls-passthrough functionality, so I could just run my nginx-reverse proxy locally which handles the certs and encryption and I could be 100% shure, that the company can’t read my traffic.

Oh, that’s really cool. I also tried that but couldn’t get it to work

Yeah, I will maybe look into it, thanks. Allthough, at that point I could also probably trust Pangolin aswell, their stuff is also mostly FOSS