Unlocking encrypted LUKS root partition in early boot over ssh feels like a crazy superpower.
Just tried setting it up this afternoon and it was so easy.
https://wiki.archlinux.org/title/Dm-crypt/Specialties#Remote_unlocking_of_root_(or_other)_partition