Preparing ubuntu for web-server, gaming and streaming. Including auto install with yaml config and encrypted partition

For your baremetal server hosting multiple services—a one-page website, a Counter-Strike game server, video hosting, and video streaming—designing your disk partitions with encryption requires balancing security, performance, and management ease. Here are best practices to map your disk partitions with encryption for such a setup:

1. Separate Key Partitions for Isolation and Performance

   • /boot (unencrypted): Small partition (512MB–1GB) on an unencrypted partition. It holds bootloader and kernel files that must be accessible before unlocking encrypted volumes.
   • Encrypted root (/) partition: Holds the operating system and core software.
   • Encrypted data partitions, separately for major service data:
     • Web server data (e.g., /var/www or a dedicated mount point)
     • Game server files (Counter-Strike server files and logs)
     • Video storage (videos for hosting and streaming)
     • Logs and cache (optionally, isolate logs on a separate partition to avoid filling critical volumes)

2. Use LUKS Full Disk / Partition Encryption