Ask HN: Nginx/proxy encryption filter module like rclone's?

With the cloud storage companies increasingly snooping on the content on the storage I have been looking at a module for nginx or something similar to do on the fly encryption/decryption

The idea is simple - transform the data on the fly so the storage backend has no ability to extract the unencrypted data.

Has anyone seen anything that solves this problem?