I had ~60GB going spare on my #RaspberryPi so figured I may as well make the most of it and set up #Samba for file sharing across my LAN. I'm allowing access only from mine and my partner's IPs (which are bound to our MACs) but I'm concerned the share isn't encrypted, so anyone could just walk up to the Pi and take out the SD. Any suggestions for securing shares?
@syntax
Create an encrypted LUKS container and mount that on your filesystem and then share that through Samba?
This problem isn't related to Samba afaik as it won't be encrypted unless you use FDE/LUKS for your OS/data.
@FreePietje
My first thought was LUKS or Veracrypt (I prefer the latter), but I wonder how that would affect quick and easy mounting on our devices (my partner has little patience for anything that isn't one or two clicks)
@syntax
There's normally a trade-off between (extra) security and convenience. What is an acceptable trade-off for you (and your partner) is something only you can decide.