First reason I think of to use fde all the time even if it’s automatically unlocked, is it’s simple to securely delete everything all at once. Just delete all the keys or overwrite that section of the desk.

Yes, you can have docker scripts decrypt a drive/storage. You might also consider an encrypted home partition separate from the root partition, or user space encryption of your home directory.

I think when people want to remotely decrypt fde the usual advice is installing dropbear SSH to remotely enter the password. Sorry for not providing links but it should be easy to find.

Firefox Send is open source, even though the public service is no longer offered.

Here are some public instances and instructions for self hosting: https://github.com/timvisee/send-instances/tree/master?tab=readme-ov-file

Thanks for posting this. The idea of individual services having their own IP address had never occurred to me and would solve so many issues.