@ariadne @gedvondur in my experience (which is mostly only using bluetooth audio/A2DP):
so I would recommend something intel (unless you care about not loading non-free firmware, in which case I’ve heard CSR8510 is good even though I’ve never used it myself and the aforementioned broadcom thing that I forgot the name of worked without loading any firmware too)
je m'alloc (i manage my own memory, for those who don't speak french)
@algernon Yes, it might also reduce performance a bit since it’d need to do the encryption separately for each drive it reads to/writes from. You can use the same password on all disks and have your initramfs only ask you once and cache the password. Debian apparently has decrypt_keyctl for this.
Another thing you could maybe do is use ZFS encryption, but instead of using your password directly, use a long random keyfile which you store encrypted with your actual password on another filesystem, and if you want to change your password just re-encrypt the keyfile instead of changing it in ZFS.
What I plan to do for my new server is btrfs RAID-1 in LUKS on 2 SSDs, with a weird boot process (coreboot loading linux as a payload with an initramfs containing sshd so I can SSH into it to unlock the disks remotely).