I have a Synology nas. They recently started thumbing their nose at budget/home users and if I had to buy new I’d consider QNap.

I would set up a nas at each location and enable quick connect.

I would set up a redundant drive pool and create volumes to avoid single drive failure.

I would set up the Drive services. This works just like Dropbox or onedrive. I believe there’s a component that allows Drive on one NAS to sync with Drive on another.

I would set up hyperbackup between the NAS and use Tailscale to avoid playing with firewalls, dns, NAT.

Advanced I would set up federated authentication between the nas.

I would set up firewalls and dns.

Clients I would set up the photos mobile app for everyone.

I would set up google/onedrive backups.

I would set up the Drive app on their machines.

Here is what incus supports. If you have multiple hypervisor hosts then you are talking about remote storage.

https://linuxcontainers.org/incus/docs/main/explanation/storage/

I don’t see an immediate issue but I do see some general issues.

Unless you own local.com, don’t use it.

While you could use .local as your tld, I wouldn’t do that either. You can buy a domain name for cheap and really that’s the way to go.

Also, reference your FQDN and not your hostname. Don’t expect hosts to fill in the blanks.

Keep storage separate or run the nas as a vm on the hypervisor.

Keep it simple. Have an “inside” network and an “outside”

Use a vpn access stuff inside your network. Split tunneling is fine for mobile devices.

Secure services that are exposed from outside to inside. Requiring mfa for all accounts goes a long way here. You can use some sort of proxy service.

Your should manage the firewall, so watch out for Upnp services that try to set up inbound ports automatically.

a domain and cert doesn’t equal zero trust network.

Is this webrings again?

If you’re ok with closed source and 20mbps, kemp makes a free version:

https://freeloadbalancer.com/home

Neat, but if you had Tailscale, why not use Tailscale?

I used to recommend Synology but they seem to be focused on entering the enterprise while abandoning smb/soho users. I’d look at QNap today.

It’s not hard. Just Teams but self-hosted. Free would be ideal.

/s

Yes. Synology will do this fine. They’ve been cunty recently so I recommend QNap.

I recommend adding Tailscale for remote access.