as it hardens, you might want to explore WireGuard for vpn. just saying,..

On Sat, Jun 29, 2019 at 1:46 PM Seth Kenlon <skenlon@redhat.com> wrote:
If I were the consultant in this situation, I'd install CentOS or RHEL on a well-supported server (probably not rack mountable, since I'm guessing they don't have a server room as such), and then install OpenVPN for the VPN, set up a <a href="https://www.redhat.com/sysadmin/secure-linux-network-firewall-cmd">sensible firewall with firewalld</a>, and enable SAMBA or the file sharing protocol of your choice.

Install Web Console (Cockpit) for them so they can look at the status of the machine. They'll look at it once and then never open it again, but it makes a good first impression.

It's all-in-one because it's running on one box under one OS. I would be shocked if the school admins who hired you meant "all three services must be running in daemon, under one PID" :-)


--
Seth Kenlon

skenlon@redhat.com
seth@opensource.com

PGP(F97393A5) T(+61-735-147125) M(+64-20406-19719)

redhat.com | TRIED. TESTED. TRUSTED. | redhat.com/trusted

On Sat, Jun 29, 2019 at 10:51:25AM +0200, M. Fioretti wrote:
> Greetings,
>
> One of my jobs in the next months will be Free Software teaching/
> consulting for a small private school. Part of the consulting consists
> of helping the school to evaluate how to set up some infrastructure,
> using Linux/Free Software as much as possible.
>
> I have been just asked to, quoting, "suggest an all-in-one
> NAS-VPN-firewall for the school". We are talking ~80 students in the
> 8/13 years age range, maybe more after summer, plus teachers and
> administration. The "all-in-one" part is the key requirement, and also
> the reason why I am asking for recommendations based on your
> real-world experience. I know how to handle this stuff the 100%
> DIY/hacker way, but that is not an option in this case. Me, I wouldn't
> mind but, while the school would like to use more FOSS also for
> administration and internal services, actual teaching has much higher
> priority this year.
>
> Thanks in advance for any feedback,
> Marco
> --
> M. Fioretti http://mfioretti.com                   http://stop.zona-m.net
>
> Your own civil rights and the quality of your life heavily depend on how
> software is used *around* you
> _______________________________________________
> users mailing list -- users@lists.fedoraproject.org
> To unsubscribe send an email to users-leave@lists.fedoraproject.org
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org