Cryptomator
reddit / selfhosted

----------------------------------------------------------------------
silly-beyond-me · 2023-10-26 10:04

Hello,

I am currently using a storage box from Hetzner to store a lot of
media.

I don't like to have it unencrypted, even though I believe I only have
access to it. Hetzner staff can access it as it is unencrypted. I use
it to be mounted via SMB on my VPS and use it as a seedbed storage.

​

I tried to get Cryptomator to work as CLI on ubuntu but it is not very
effective. It works in principle but it can not be used properly.
Cryptomator would work best since I can use mountain duck to view the
files and integrate it into my Mac.

​

what can be done here for encryption ? Can we somehow convince the
cryptomator team to focus more on CLI development ? Has anyone managed
a home-brew solution for this ?

​

Thanks

----------------------------------------------------------------------
flrn74 · 2023-10-26 10:58

I mount sensitive partitions using lukscrypt with a passphrase. Works
well.

----------------------------------------------------------------------
henry_tennenbaum · 2023-10-26 11:14

> lukscrypt

You mount cloud storage with lukscrypt?

----------------------------------------------------------------------
henry_tennenbaum · 2023-10-26 11:17

Yeah, I've also been disappointed when I found out that Cryptomator is
really not designed to be used via cli.

For your use case, rclone encrypted remotes are probably the most
sensible option.

There's also gocryptfs as a faster and purely cli focused alternative
to Cryptomator. It can be installed on macs via homebrew and similar
solutions. Cryfs is another option.

----------------------------------------------------------------------
flrn74 · 2023-10-26 12:34

No, the partitions within the server (virtual or physical). You can
technically use lukscrypt on anything that acts as a block device
though, so you might be able to do this on some types of cloud storage
too. Not sure how reliable that would work though. Could be affected
too much by latency, drops etc.

----------------------------------------------------------------------
waywardelectron · 2023-10-26 13:22

Oh, thank you for mentioning gocryptfs, this looks really interesting.

----------------------------------------------------------------------
nibbl0r · 2023-10-26 18:45

doing this for years, mount storage box via
nfs/cifs/ftpfs/sshfs/whateverfs, create a big file, luksformat it etc.

----------------------------------------------------------------------
enotl66 · 2023-10-26 21:29

SecureFS is another option. Personally I prefer gocryptfs, but
securefs is easier to install on Macs.

----------------------------------------------------------------------
rrrmmmrrrmmm · 2023-10-30 09:42

Use [rClone](https://rclone.org/crypt/) with local storage. Nice thing
about it is, that you can also mount it from your desktop and phone.

It's fast, robust and easy.