@inawhilecrocodile @tfb @nielsk @TheServitor @gyptazy

Thank you for your comprehensive answers.You confirmed my concerns.

I am going to host some services for my self, my family and in time maybe for other people that might be interested.

Safety and privacy are important to me. That is one of the reasons to self host in the first place.

Based on my concerns and your confirmation I am going to host these at home. I will have to think about a backup strategy. I guess I could periodically encrypt and upload the data to a remote location.

First, apply zero-trust models everywhere. And this does not only apply to VPS instances, it also applies to dedicated servers - with VPS instances, it's just a bit easier, because vdisks could potentially be easily copied at any time and even when encrypted, accessing the instance is easier while it's running. But it's not that much different to dedicated servers unless you have additional physical access controls, which comes in addition to FDE at least to a much better restriction.

@christopher@bsd.cafe