Why not encrypting your whole server ?

Using LUKS, whole linux can be encrypted in many ways. Here’s the method I use in my Arch Linux