I'm trying to figure out the best way to store my org-roam files on a cloud service. I wonder if anyone in the community have setup any if the following software to encrypt their org files:
- EncFS
- gocryptfs
- cryptomator-cli

I'm trying to find a safe, reliable, and smooth solution that works nice in #Emacs .

#OrgRoam #encryption

@Mehrad Not what you asked, but I can't help but wonder if it might be better to use the built in encryption stuff:

https://orgmode.org/worg/org-tutorials/encrypting-files.html

... and then just find a way to sync the encrypted files somewhere remote. Syncthing?

Encrypting org Files.

@Mehrad I use the built-in encryption in #restic

@Mehrad I used to use 'encfs' with Dropbox years ago, however last I looked it appeared somewhat unmaintained from a security standpoint. For the same functionality today, I'd probably use 'gocryptfs'.

However I don't really need this functionality any more. I use syncthing for local device synchronisation and combinations of borg and restic+rclone (spread across storage providers) for encrypted, compressed, deduplicated backups. Backups are only for recovery from data loss.

@shimeike
Thanks. encfs is now reviveyand ported to rust, but according to the maintainer, it is still in alpha stage:

https://github.com/vgough/encfs

I used to use encfs bafore covid, and then due to maintenance issue you mentioned, I switched to cryptomator. Now I'm inclined to try gocryptfs and see how it goes.

Have you ever had any issues with your org-roam and encryption?

GitHub - vgough/encfs: EncFS: an Encrypted Filesystem for FUSE.

EncFS: an Encrypted Filesystem for FUSE. Contribute to vgough/encfs development by creating an account on GitHub.

GitHub

@Mehrad
Ah, interesting - I hadn't realised it lived again!

Sorry, I should have said that I don't actually use org-roam - just lots of org files (managed using 'deft' back in those days). I can't see why there'd be an issue with the roam db related specifically to the encryption.

I do also use 'org-crypt' to encrypt sensitive subtrees which is very handy, though it serves a different use-case from the "filesystem-esque" approaches that you originally enquired about.

@Mehrad
You can store things in your encrypted volume with anything that work and use syncthing to have copies in other places.

I use an encrypted home and syncthing with trusted devices, with borg encrypted backups on zfs, replicated for hot and cold storages