Everything stored on encrypted ZFS. Backups are done using syncoid in rend-mode, so the remote gets the encrypted version. I make backups to a couple friends' s

Everything stored on encrypted ZFS. Backups are done using syncoid in rend-mode, so the remote gets the encrypted version. I make backups to a couple friends' servers who also use ZFS, and they make backups to me. The encryption key is stored in my KeePass password database, which is synced locally to all my devices. I back up the database separately by sending it to friends, so that if I ever lose access to all my devices I can still get my database with the key I need to get the rest of my backups. If all that fails, like if I die or for some medical reasons suddenly forget my passwords, the encryption key is written down on a piece of paper. Stored somewhat secretly, some people I trust know where.