That’s my next project to get things from Google/Apple.
The options I’ve seen so far
- Immich: great if you can self-host, but I prefer not to, so that’s out for me
- Nextcloud on a VPS (Hetzner or others): you need E2EE to prevent the providers from seeing your photos, but then all the apps like Memories etc don’t work ( https://help.nextcloud.com/t/end-to-end-encryption-nextcloud/237705/3 )
- Ente: has E2EE embedded, the face recognition happens on the clients. Can be self-hostable, so that gives more trust that other providers can launch their own European instances in the future.
- https://zeitkapsl.eu/en/ : has E2EE, but no self hostable option, so you kind of have to trust them that they implement their design (which is actually kind of nice: https://zeitkapsl.eu/en/e2ee-architecture/ . They have a security audit on their roadmap (announced 8 days ago: https://zeitkapsl.featurebase.app/en/p/formal-security-audit )
Any option I am missing?
What? Disk encryption is definitely “allowed”, and yes, that is how you should do it. It’s not “cumbersome” either, most installers have a GUI for that, and if Hetzner offers preconfigured images, full disk encryption is probably one of the offers.
I am now convinced that you are a little overwhelmed by the thought of managing a VPS. That is totally OK! But don’t go talking out your ass because of it.
I was answering based on this thread ( https://old.reddit.com/r/hetzner/comments/1hi6ktq/how_to_use_encrypted_rootfs_on_cloud_instancesvps/ ) with the following steps
The definition of “cumbersome” will vary from person to person.
Indeed, that’s why I want to avoid to self host in the first place.
Not sure about the “talking out of my ass” part.