# Introduction

<span style="white-space: pre-wrap;">I've set up a Synology NAS (Network Attached Storage) system in my home to create a secure and private cloud for storing personal files and data. This system is connected to a Ubiquiti network, ensuring high-speed internet and robust security. The NAS is organized into different segments, or VLANs, that separate various types of devices, like trusted computers, smart home gadgets, and experimental setups, each with strict rules to keep everything safe. I use advanced security measures like firewalls, encryption, and frequent snapshots to protect against data breaches, ransomware, and physical damage. Regular backups are made to an external drive, so even in case of a total system failure, data can be recovered.</span>

<span style="white-space: pre-wrap;">For accessing files, I've implemented a role-based system where each user has their own secure space, and specific groups can access shared folders. Two-factor authentication and strong passwords add extra layers of security. The system is also designed with redundancy, using technology that duplicates data across multiple drives, ensuring no data is lost if one drive fails. External access to the system is managed through Synology's secure QuickConnect service, making it easy and safe to connect from anywhere.</span>

<span style="white-space: pre-wrap;"> I'm using the DS923+ model, which currently holds 12 TB of storage space utilizing Seagate NAS Hard Drives. This document covers my setup and the best practices I followed to ensure a smooth user experience in the most secure way possible. This infrastructure setup is designed using </span><span style="font-weight: bold;"><span style="white-space: pre-wrap;">GDPR</span></span><span style="white-space: pre-wrap;">, </span><span style="font-weight: bold;"><span style="white-space: pre-wrap;">ISO/IEC 27001</span></span><span style="white-space: pre-wrap;"> and </span><span style="font-weight: bold;"><span style="white-space: pre-wrap;">SOC 2 Type II</span></span><span style="white-space: pre-wrap;"> standards.</span>

<span style="white-space: pre-wrap;">Content of Document: </span>

1. <span style="white-space: pre-wrap;">Network Security</span>
1. <span style="white-space: pre-wrap;">Network Setup</span>
2. <span style="white-space: pre-wrap;">Firewall and Security Setup</span>

3. <span style="white-space: pre-wrap;">Synology Setup</span>
3. <span style="white-space: pre-wrap;">User and Group Policy</span>
4. <span style="white-space: pre-wrap;">Folder and File Permissions</span>
5. <span style="white-space: pre-wrap;">Security and Firewall</span>
6. <span style="white-space: pre-wrap;">QuickConnect</span>

5. <span style="white-space: pre-wrap;">Redundancy and Backup</span>
7. <span style="white-space: pre-wrap;">Redundancy</span>
8. <span style="white-space: pre-wrap;">Snapshots</span>
9. <span style="white-space: pre-wrap;">Backups</span>