This is more of a theoretical question and request for advice and pointers than a question about specific software.
I have a distro-agnostic Linux machine (meaning I don't really care what to put in there atm), which I intend to place in a DC somewhere, where the location is not very secure (long story why), and where there is a risk of the server being physically removed and opened up for data extraction.
Is there a way to make life hard for the hackers even if they have the option of pulling the hard drives out, and basically doing whatever they want to them? The software in question is some locked down websites, user files, mysql db etc, all pretty standard stuff for a LAMP machine.
All that comes to mind is to encrypt the entire FS (no problem to add better spindles and more CPU muscle for that), but is there anything besides that?