I have a box (currently raspberry pi) running ubuntu with my application server running in docker.I have an nginx docker container with a certificate baked in proxying requests for https over the local network. (The intention is many different clients will have this box)I want the user to be able to press the power button on the box and have the servers start with no intervention (there is no screen/keyboard etc). How can I ensure that the certificate and application data cannot be extracted if someone gets physical access to the box? Initially I was thinking about disk encryption, however the fact that there are no peripherals makes this an issue.
Certificate/Data security on client server
security