Scares me a bit now.

Yeah, I'm generally a bit scared of encryption unless it's all automated by some app like Signal or whatever. I'm always worried something will go wrong or I'll forget/ loose my pw and loose access to my own files. I tend to feel that in my own personal circumstances that is a greater risk than someone nefarious managing to access my unencrypted files, so I mostly just don't encrypt stuff.

But this sounds like a pretty good method of getting Ubuntu's full disk encryption set-up with Cloudron (so long as you store you passwords safely, like in a password manager and printed out on paper, and maybe somewhere else too for good measure):

https://forum.cloudron.io/post/59269

For now though, I reckon my files are safe enough behind insanely long passwords plus 2FA

https://forum.cloudron.io/search?term=nextcloud+encryption&in=titlesposts

That in itself is a bit of red flag for me.

In case you stumble upon any more information or sources regarding this I would appreciate an update here, as this is really of an interesting topic.

@Stardenver my understanding was that the issues run deeper than that and that it just doesn't work very well and is liable to break, but I could be completely mistaken about that.

Could you provide some more information and maybe a source for this?

@Stardenver said in Storage Box vs HDD for volumes:

use nextcloud encryption

I've read elsewhere on here that using Nextcloud encryption is a bad move because apparently "it's a joke"

Not really. Its useless within Nexloud as your hoster could still access your installation or even get his hands on your encryption keys. But it prevents external storage providers from looking into your files.

So everyone with access to your server could somehow read your files, but external storages like Google Drive, AWS, Dropbox, etc don't have access to your server files and keys and therefor can't spy onto your files. So it prevents Google and Co from reading your files.

Its a solution to protect your "outsourced" files and not those that are stored directly on your server.

use nextcloud encryption

I've read elsewhere on here that using Nextcloud encryption is a bad move because apparently it's "an absolute joke"

@privsec said in Encryption error since upgrade to 25.0.2:

next cloud encryption is an absolute joke.

Don’t use it

Currently I am trying to do exactly the same. But I have problems to get the Storage Box as internal Storage in Nextcloud. How exactly did you do that?

I mounted the storage box as volume and assigned that volume to nextcloud in the settings (within cloudron - not in nextcloud) so it has access to it. I then installed the external storage app and added the volume to Nextcloud as local storage.

So 3 steps actually (which I will repeat):

1. mount as volume in cloudron settings
2. add volume to nextcloud in the cloudron apps settings for nextcloud
3. add volume as local storage within nextcloud settings

hope this helps