I have a server which has 'loose' physical security (somewhat easy for the entire server to get stolen).
For the sake of the question, let's assume that anyone can access the server physically, what precautions should I be using to keep the data secure?
My initial thought would be to keep all logs, databases, user content, etc. in an encrypted TrueCrypt container. This means that if the hard disk/server is stolen, they will be unable to access the private data. However, what if someone plugs a screen and keyboard into the server? If I am currently logged in via SSH, does that leave the server vulnerable locally? Can I trust Linux's standard "enter password" prompt or can that easily be bypassed?
I'd like to be able to boot and access my server remotely without being forced to enter a password locally (for example if the OS was encrypted)
Thanks for your help