I specifically care about my server getting stolen. You need Luks encryption in place for that, but also some clever password automation so you don’t type it in each time