@neil @benc there's also gocryptfs, which I found a little easier to manage (it's a single go binary, no more issue with libraries) and it's still actively developed (encfs is in maintenance mode and the main developer recommends gocryptfs too for new deployments)