Self hosted encrypted backups

I'm looking for a solution I can self host. I want to be sure that data at rest is encrypted as well. I was thinking of an Azure or AWS solution but while they may be encrypted in some way I believe those providers could still ultimately access any data. Looking at nextcloud or syncthing but at a glance it doesn't seem like there is any kind of local encryption that could stop someone with physical access.

Obviously you need …

access aws azure backups data encrypted encryption host local may nextcloud physical privacy rest self hosted solution syncthing thinking