I’m scratching my head here in confusion. It’s been that kind of day.
I kind of messed up my Nextcloud server in an attempt to get vlans working today. Long story, I gave up on long time ago and I’m rebuilding.
The issues I’m running into now is trying to pass NFS to a VLAN.
On TrueNas I’ve configured a management interface and two VLANS. One is my internal (office) vlan. the other is public. Yes I’m going to be hosting nextcloud publicly behind a proxy.
The plan is (and tell me if it’s a dumbplan, I’m no network engineer)
Public traffic comes into the public vlan, firewalled off from literally everywhere.
SSH is allowed out of my management vlan into the server and NFS is served on the public VLAN for the file storage needed for nextcloud.
So in the NFS servcice config I’ve selected the public vlan to bind to.
My virtual machine is given an address from the public vlan.
And I have disabled and removed all firewall rules and allowed all traffic.
I can ping from VM to my desktop on a different VLAN
I can ping from my desktop to the VM and TrueNas (on both the interface addresses and the NFS address)
I can ping nothing on TrueNas from my VM. I can however ping my desktop (on a different vlan)
My head is starting to spin at this point.
if there is an easier/better/more secure way of serving the data storage to this VM, I’m all ears. From my reading it sounded like this was better then allowing traffic in from the public VLAN to another VLAN to serve the data storage.