[mlangenberg]

Wouldn’t you want your photos to be encrypted at rest on the Hetzner storage box?

[aecsocket]

I don't really care about that, since my threat model doesn't involve Hetzner looking through my photos and training an AI model on them. If/when I move this off to my own hardware, then I'll do full disk encryption, since my threat model may involve someone stealing my hardware.

[j45]

Docker could be run on the VPS, and the storage leg could be encrypted.

I'm presuming some VPS providers allow converting your VPS disk image to something that supports encryption.

[mlangenberg]

Is that something that docker can do?

I presume gocryptfs can be used to wrap an SMB mounted Hetzner storage box. Haven’t tried it myself though.

I would be careful storing any personal data on it unencrypted.