Hi everyone,
I got a bit of an issue/I am a bit lost in terms of photo management software and the special usecase I have.
My situation: I have two main proxmox servers - one at home, one as a dedicated server with a hoster. The former is pretty capable and has plenty of storage. The latter is doing okay,but storage is getting freaking expensive pretty fast on dedicated machines so I have that much space available.
I usually use the public machine for anything “public facing”, e.g. services I host for friends and family, website and -and here comes my problem- photo backup from mobile devices as well as sharing photos with relatives,friends,etc.
The home server originally started as a NAS and acts as a storage for my relatively large photo collection (I worked as a photographer as a sidegig for a bit and therefore have,well, a relatively large collection).
My task/issue: I can’t really put the home box public facing (home internet is way too unstable here) and honestly don’t want to for security concerns. On the other hand I can’t really put my collection on the public machine - that would quadruple my costs as I would need a much better dedicated machine then. For the lower amount of new photos coming in through backups it’s not an issue,but for the whole collection it would be. Now,very rightfully, the family complains that uploading and sorting the photos twice can’t also be a proper solution. Side note: (Photos shared are basically only newly added ones)
So I had the idea to enable a one way push from the public facing instance to the private instance. That can of course be done by an export script once per day or something. But that would only export the actual pictures - no software I know of provides an option to one way sync the metadata around it as well. Which is quite odd, as I don’t think I would be the only one with that issue.
So… People…am I overthinking this? Am I doing something wrong? Does anyone have an idea how to solve this?
I have been using frp to expose one port of my private server to the public one. Then on the public server, I’m using nginx as reverse proxy to enable https.
This works great for my use case. Regarding security, if the application has a vulnerability, it is still an open door to your private server. My app runs on rootless podman, so only the container and the data it contains would be compromised.