Check Borg documentation. Somewhere there there’s a way to pass the password as an environmental variable.

For sure i make backups. I have a proper 3-2-1 of everything I care.

Well. I guess it won’t be your choice but I just uploaded all my stuff to Apple Music and listen from there. When you subscribe they have a nice feature of keeping your own music in the cloud. Even if something is not available in streaming they make it streamed.

EDIT: for the question I guess I’d go with a script

Here’s my way of doing it. TLDR: LUKS with a encryption key hosted in my router

https://nowicki.io/self-hosting-lvm-raid1-with-key-over-ftp/

I keep my drives encrypted with a key currently hosted in my router hoping they wouldn’t steal that. I’m thinking of actually putting it to cloud so I can disable it remotely.

It was quite a ride to make everything work and I made a blog post explaining it so I remember what I did.

https://nowicki.io/self-hosting-lvm-raid1-with-key-over-ftp/

So it was DNS?