I would like to do something really paranoid but I am not sure it could be done at least easily... Let's see if I can explain properly:
I have a server running debian (could be changed to any other dist but debian is the one I feel more comfortable with). I would like to have a disk encrypted, a file mounted as a FS or whatever that doesn't mind.
This server will be connected remotely only through secured connections scp of sftp. I would like to set the home to this encrypted disk and I would like to allow to see the encrypted files only to the logged thru the ssh/sftp system only. those files will be transferred to the user computer via ssh so they will remain encrypted.
I don't mind if a two step authentication have to be done, one for the ssh and other for the encryption but I need it to be private and secure. As you can imagine the idea of this is having a company remote repository in a hosted server. this data is pretty sensitive so we want to be paranoid.
Any idea? I am looking into the wrong direction?
As usual I really appreciate your support.