Network: cloud data server

Network: cloud data server

Cloud data became popular with the introduction of Dropbox and today we have iCloud, Google Drive, OneDrive etc. that are all massively popular. While everyone accepts their small print conditions without even reading them, we know from sources like Snowden that governments do mass data surveillance including hacking and threatening to gain access to your data. Also, conditions change like the cost of service or features become more limited.

Besides those negatives, there are many positives as well: it is very convenient and with data being replicated over multiple sites it becomes almost impossible to lose it. When we want to create our own cloud services, we must keep these features in mind.

A MacMini comes with MacOS and that has file sharing built in, turning your Mac into a LAN fileserver. To gain access from remote locations you can simply use the Wireguard VPN service which puts you back onto your LAN from wherever you are. All client operating systems have support to access such servers including iOS where your own server becomes an option just like iCloud.

But we also want to share files or allow someone to upload a file to us. For this I opted for the open source FileBrowser, which allows one to create links to share files for a specified duration or forever and allows creation of users that can login and get their own folder and a configurable amount of disk space. I tested this recently by sharing a 3D design on this blog.

I used a simple external 3TB travel hard disk to store this data but you could use a NAS with disk redundancy if you like. As a first measure of data security I made a full backup onto another hard disk manually but there must be an automated system doing backups to an offsite location. For me that will be another MacMini installed aboard Jedi, as these use each other as a Time Machine backup destination via a Wireguard VPN.

All this shows the importance of the VPN service: not only to allow the functionality but also by making it very secure using authentication and encryption.