Linux/gocryptfs

Forward mode

• files are always encrypted, become decrypted when mounting

mkdir encrypteddir
mkdir plaindir
gocryptfs --init encrypteddir
gocryptfs encrypteddir plaindir        
fusermount -u plaindir     

reverse mode

• files are always decrypted, become encrypted when mounting
• good for cloud backup syncing

mkdir /home/joe.crypt
gocryptfs -init -reverse /home/joe
gocryptfs -reverse /home/joe /home/joe.crypt
fusermount -u plain   
-> then rsync/rclone /home/joe.crypt to insecure cloud storage