![](/static/253f0d9b/assets/icons/icon-96x96.png)
![](https://lemmy.ml/pictrs/image/q98XK4sKtw.png)
3·
1 year agoRegarding /boot, it can be encrypted as long as your bootloader can decrypt it, for example GRUB can decrypt LUKS encrypted partitions (albeit somewhat slowly). And the only partition that really has to be unencrypted is UEFI system partition (ESP), where bootloaders are located.
Of course it depends on what software you are using.
Though as a rule of thumb, peers try to connect directly. That’s not always possible due to firewalls/NATs, so often TURN servers are used as intermediary.