as it hardens, you might want to explore WireGuard for vpn. just saying,.. On Sat, Jun 29, 2019 at 1:46 PM Seth Kenlon <sken...@redhat.com> wrote:
> If I were the consultant in this situation, I'd install CentOS or RHEL on > a well-supported server (probably not rack mountable, since I'm guessing > they don't have a server room as such), and then install OpenVPN for the > VPN, set up a <a href=" > https://www.redhat.com/sysadmin/secure-linux-network-firewall-cmd">sensible > firewall with firewalld</a>, and enable SAMBA or the file sharing protocol > of your choice. > > Install Web Console (Cockpit) for them so they can look at the status of > the machine. They'll look at it once and then never open it again, but it > makes a good first impression. > > It's all-in-one because it's running on one box under one OS. I would be > shocked if the school admins who hired you meant "all three services must > be running in daemon, under one PID" :-) > > > -- > Seth Kenlon > > sken...@redhat.com > s...@opensource.com > > PGP(F97393A5) T(+61-735-147125) M(+64-20406-19719) > > redhat.com | TRIED. TESTED. TRUSTED. | redhat.com/trusted > > On Sat, Jun 29, 2019 at 10:51:25AM +0200, M. Fioretti wrote: > > Greetings, > > > > One of my jobs in the next months will be Free Software teaching/ > > consulting for a small private school. Part of the consulting consists > > of helping the school to evaluate how to set up some infrastructure, > > using Linux/Free Software as much as possible. > > > > I have been just asked to, quoting, "suggest an all-in-one > > NAS-VPN-firewall for the school". We are talking ~80 students in the > > 8/13 years age range, maybe more after summer, plus teachers and > > administration. The "all-in-one" part is the key requirement, and also > > the reason why I am asking for recommendations based on your > > real-world experience. I know how to handle this stuff the 100% > > DIY/hacker way, but that is not an option in this case. Me, I wouldn't > > mind but, while the school would like to use more FOSS also for > > administration and internal services, actual teaching has much higher > > priority this year. > > > > Thanks in advance for any feedback, > > Marco > > -- > > M. Fioretti http://mfioretti.com > http://stop.zona-m.net > > > > Your own civil rights and the quality of your life heavily depend on how > > software is used *around* you > > _______________________________________________ > > users mailing list -- users@lists.fedoraproject.org > > To unsubscribe send an email to users-le...@lists.fedoraproject.org > > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > > List Archives: > https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org > _______________________________________________ > users mailing list -- users@lists.fedoraproject.org > To unsubscribe send an email to users-le...@lists.fedoraproject.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org >
_______________________________________________ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org