I have a yubikey setup to autounlock my laptop luks. It’s a bit of a pain to get setup the first time then it just works. Not sure it’s worth it for a home server unless it has some real valuable data on it. And in that case you wouldn’t want the key stored anywhere near it.

We allow registration with a one time token only and a hidden registration page. The token is generated via bot by an admin/mod.