Heya,
your tool is by far one of the most useful tools I have ever used!
Since they/truenas keep the password seed next to the sqlite db it is mandatory to boot truenas from an opal 2 nvme which has its sed keys locked down!! having a small webserver to unlock the drive is just genius.
Thanks to your tool I got a fully encrypted nas with excellent protection at rest! Sure you can password protect datasets. But offsite backups of these leak credentials via the normally unencrypted boot pool which sadly is fail by design… and no access to the enterprise version which can outsource these creds to a kmpi server makes situation even worse…
Thanks a lot!