TrueNAS Scale Server Configuration & Security

Job ID: 39109378

Budget: $30 – $250 USD

Project Overview:

I need a specialist to configure and secure my TrueNAS Scale (v24.10.2) NAS (N100, 32GB RAM, 2×8TB HDD, 2x128GB SSD – 1 for boot). The server will be set up in a different location with a public IP. The goal is to ensure secure remote access, optimal performance, and restricted user access to specific services while keeping the setup stable and user-friendly.
Access Requirements:
-NAS (Location 1): Public IP, router access available.
-Admin Access (Location 2 & others): Full control, no router access.
-User Access (Locations 3, 4, 5, etc.): Only to Jellyfin/Jellyseerr, no router access or NAS-level control.

Scope of Work:

1.Remote Administrative Access:
-Secure access (PC, Android/Android TV).
-Protection against unauthorized access.
2.User Access to Jellyfin/Jellyseerr:
-Only for Android TV Box streaming.
-No access to other NAS resources.
-Plug & Play – no manual VPN/router setup required for users.
3.qBittorrent Configuration:
-Hidden and routed through VPN (PIA/ProtonVPN).
4.Application Installation & Configuration:
-Jellyfin, Jellyseerr
-qBittorrent + VPN
-autobrr
-immich
-Netdata
-Scrutiny
-Nextcloud (optional)
-Other recommended apps

Additional Resources:

-Available VPN plans (PIA, ProtonVPN).
-Willing to purchase a domain if necessary.

Other Considerations:

-Server is not yet deployed in its final location.
-No plans for running VMs – media center focus.
-Preference for an easy-to-use solution, especially for non-tech users.
-Open to suggestions on best practices.
-Proxmox vs. TrueNAS Scale?
-Best deployment method: Native TrueNAS apps vs. Docker containers via shell?

Looking for expert advice on the most secure, efficient, and user-friendly setup