LUKS on Every Data Volume

Tue, 25 Aug 2026 10:00:00 +0200

The threat model for a rented server is simple to state: my data sits on disks I will never see, in a data center I will never visit, handled by people I will never meet. Disks get decommissioned, snapshots get copied, hardware gets recycled. I can’t control any of that. What I can control is whether the bytes on those disks mean anything without a passphrase. Last week covered the secrets that never leave the git repository; this week is about the disks those secrets unlock.

Secrets That Live in Git

Tue, 18 Aug 2026 10:00:00 +0200

This is the first of the foundation retrospectives I promised in the catch-up post. We’re going back to December, before a single server existed, when the first real decision of the project wasn’t about compute or DNS. It was: where do the secrets live?

Security on Cumps · Geek.

LUKS on Every Data Volume

Secrets That Live in Git