1 TB active, 2 TB Backup on my own storage and 2 TB Backup remote on internxt (lifetime plan).

Before being overly excited about their lifetime offerings (and discounts on such) getting the backups running reliably was a pain up until their last webdav update, so I would consider them with caution. Also I’m not sure they do another round discounts on their plans… at least their marketing mails said it was the last chance - but hey, that also might be a strategy to make you buy in.

Not using ZFS but a similar approach: All my data (paperless, and other docker container data) is encrypted with LUKS on a separate disk. The OS is running unencrypted on the SD card (using a Raspberry Pi). This way I can swap out the system and relink the docker container data if needed. Yes, I do need to unlock after a reboot, but since the system is fully up, that’s done easily via ssh.

Still looking into ways to unlock it automatically on certain criteria…