external hardisk on CHR - remote access

RouterOS General
1

Good morning, I have a CHR with RouterOS 7.12.1, I installed the ROSE package. Using Proxmox I exposed a SATA partition and formatted it in ext4. Now when I launch the file print command I see the sata1 disk as an external disk. If you want to give access to just the sata1 disk to an external company in a secure way via the internet, what system do I use? sftp to folder only? I don’t know if it can be done, perhaps I risk giving access to the CHR in SSH since the user needs read, write and SSH permissions to be able to write in SFTP.

Solution 2: do I mount the disk in NFS by opening the ports only towards the company IP while keeping everything else closed?

Given that the external company will have to write backups to my disk from their proxmox.

I don’t know what the best solution is

2

ROS is not NAS OS, it’s routing OS with some added services. Which usually aren’t very well implemented and thus at least problematic when one wants to use them for anything except for ROS management purposes.

Since you’re mentioning CHR and proxmox: IMO much better solution would be to run a dedicated VM (with OS of choice, I’d go with linux) and offer needed services from that VM. You’ll get a full-featured server running latest service software. You can put it behind your CHR and use CHR to limit access to services (i.e. configure appropriate firewall rules).
I’d arrange for SFTP access (you can configure standard OpenSSH server so that it doesn’t allow interactive ssh access).

3

Thanks.