I have a bunch of video file I would like my friend to be able to download at his convenience. He can figure out how to use an ftp client, stuff like that, but he's not tech savvy as such, so I would prefer a way that requires him to do as little as possible.
a fast fiber connection, which is awesome btw.
a couple of old rack servers running 24/7, which is a bit noisy but also awesome.
a network setup with a dedicated DMZ that can't reach my private LAN
Currently I have two virtual servers running in the DMZ, the first one a file server called dmzstorage and the second one called accessserver, both running ubuntu server 18.04
The idea is that dmzstorage holds the files I want to share, while accessserver has a read only NFS connection to the shared files on dmzstorage and handles the access from the outside. It allows me to quickly and easily try a number of options for outside access while keeping the file server untouched. I can build a bunch of different versions of the accessserver virtually and end up keeping the one I like the best.
I've been experimenting with sftp on the accessserver.
I like that it's secure and only requires my friend to find an ftp client that supports sftp (which many do).
I dislike that I have to open port 22 to the outside. Even though I've created a user for my friend with no shell access it still rubs me the wrong way to leave port 22 open.
One solution could be to run two instances of ssh on the accessserver, a regular one on port 22 so I can manage the server from my LAN and another sftp only instance running on port 2222 and then have my firewall translate my outside ip at port 22 to my accessserver at port 2222 - that way my friend wouldn't notice the difference and the black hats would try to accomplish ssh access on a port that doesn't support an ssh shell.
Question is, is there a smarter/better/simpler way to do this? The accessserver doesn't have to run linux if things are done better with some turnkey solution or maybe windows, setting up a samba share on dmzstorage is no biggie.
So how would you do it?