[entire-name]

My current solution to perform backups with local encryption (locally encrypted before syncing) is to use a gocryptfs setup. Specifically, I create an overlay with gocryptfs in which the overlay has the unencrypted filesystem, and what's physically written to disk are the encrypted files.

Then, I create another mount on the physical disk and simply sync _that_ mount to multiple remote sources. Of course, this solution is fairly simple, and does not provide the features like file moves. Further, this approach potentially "leaks" some information, such as how many files I have, the approximate sizes of each file, etc.

This was set up a while ago; will definitely take a look at NFreezer to see if it's time for a refresh of my setup.