Some technical ideas for migration here
and for POD encryption here so that host provider doesn’t read your data