New server deployment on VPS encryption idea

Just got done deploying via do droplet, replete with nginx, mysql, php, drupal 8, and drush from scratch, and - since scripting this sort of basic deployment has been on my mind for over three to five years now... long before the convenience of digitalocean droplets - basically tried to standardize this sort of deployment via script. I didn't have time to follow through with that (at least, not entirely), especially since's dashboard incentivizes me to be lazy via allowing me to simply snapshot deployments.