[limmeau]

ecryptfs is also file-level, though more difficult to set up. (The "e" is for "enterprise", so you spend time entering token into keyrings etc).