tip: create a luks container as file (like so: https://blog.canadianwebhosting.com/how-to-create-an-encrypted-container/)
and keep a copy of your gnupg keys, ssh keys and encrypted backup passwords.
after closing the luks container, you can copy that to (multiple) USB sticks/SD-cards safely