• 4 Posts
  • 900 Comments
Joined 1 year ago
cake
Cake day: July 7th, 2023

help-circle













  • What you’re talking about is a software solution, but the solutions you mention are not standalone software in the way you’re thinking.

    Honestly, it sounds like you don’t want a NAS, you just want shared network storage. If that’s the case, make a Fat partition, share it windows, then go configure samba under the Linux side similarly, paying attention to map a user with a matching uid. There will be some wonk happening here and there with file permissions perhaps, but it will work for the most part.

    The other options you mentioned are meant to control the entire host, but you may be ready to make that leap yet.

    For minimal money, you could also try and get your hands on an older RPi (possibly for free, people just have them laying around), and attach your disks via USB to that, and then you have a basic, but dedicated NAS you can setup the way you like.







  • Wireguard is a VPN, so that’s not going to help you much here unless you’re forwarding all your traffic through a remote server, in which case anyone gets in there will still be able to get your local machines. It’s another hop in the chain, but that’s about it.

    If you want to be more on guard about reacting to attacks, or just bad traffic, you probably want something like Crowdsec. You’ll at least be able to detect and ban IPs probing your services. If that’s too much work, leverage OoenWRT reporting and some scripting to ban bad actors that probe your firewall and open ports. That’s a good first step.

    If you’re concerned about the containers, consider using something more secure than dockerd. Podman rootless with a dedicated service user is a good start. Then maybe look at something more complex: Kata, gvisor, lxc…etc. The goal being sandboxing the containers more to prevent jailbreaks.