If you have a server in your homelab where you self-host I mich just encrypt the hard drive with LUKS.