// encrypted storage

secure-luks-dropbox

Step-by-step schemes for building encrypted, remotely-unlockable storage systems on low-power hardware.

luks raspberry-pi tailscale 2025-04-23

LUKS Dropbox: Key + Vault

Two-device encrypted storage scheme. A Raspberry Pi "vault" hosts a LUKS-encrypted partition that only unlocks when a second "key" device is physically present on the local network. Remote access via Tailscale, locked down with UFW + Fail2Ban.

view scheme →