I travel quite and bit and just had a child.
Congratulations.
Is this possible, a good idea, are there better ways?
"Best Practices" sez servers should be in a "DMZ", separated from the user LAN.
If you don't have/want another box to build a DMZ with (and you don't want to opt for writing the images to a remote account like a free website) then I'd say you should set the box up as a server first, meaning it should be hardened properly (accounts, SW, services, ACL's, logging and auditing features, etc etc). Make sure to check out the rest of the boxen on the LAN as well. Then set up the router to only forward HTTPS traffic and set up Apache-SSL or Apache+mod_ssl. Make sure you test your setup from the outside before you go "live".
|