I have developed a web service for customer. The web service is written in Python and running in Docker containers. It is managed by
The customer wants my web service to run on their own Ubuntu servers, but I have control over those servers. I can reinstall them, manage them, and only I know the login credentials. Likewise, I run the web service as well, not them. They only have physical access. If they're fair, they won't try to steal my code, but if they're not, I'm wondering how to guard my source code.
One option might be to encrypt the disk (for example, LUKS encryption when installing Ubuntu) and Dropbear SSH for remote disk decryption. But if I understand correctly, the moment the disk is decrypted and the web service is running, someone with Live USB Ubuntu can get to the data.
If this is true, what are the other options?