4 ms·
You can use https://www.photosync-app.com/home https://www.photosync-app.com/home if all you want is a local backup. It has a killer feature Immich is still mis
by QuiEgo 23d ago
You can use https://www.photosync-app.com/home https://www.photosync-app.com/home if all you want is a local backup. It has a killer feature Immich is still missing: encryption at rest of the photos.
- drdexebtjl 23d agoJust use LUKS, eCryptfs, or ZFS encryption. It’s not the application’s job to do encryption at rest, it’s the filesystem’s.
- QuiEgo 23d agoI personally find it nicer to unlock my phone to decrypt (Face ID) then dealing with having to auth with my headless server. Is there a way to manage this without putting the keys for LUKS or similar somewhere risky? Main threat is someone stealing the NAS during a break in.
- drdexebtjl 23d agoYou can store the key in the TPM. If someone steals the NAS, they can only decrypt it if they continue running the exact same software, which you harden (e.g. disable password login from the TTY). Or you can SSH in and type the key once per reboot.