ehbowen
I'm a hobbyist/home office user who also manages the network for our (very!) small church. While I'm not overly concerned about concealing my browsing activity, I would like to be able to securely access my home office LAN and the church LAN from remote locations. After reading about the VPN alternatives, I'm wanting to implement OpenVPN on both.
For the network VPN server I have the choice of either a Mikrotik router/gateway or else a Synology NAS device. I could also re-purpose or acquire another Raspberry Pi. I really don't have a good feel as to which will be the overall best solution.
Currently both networks are Internet-accessible with static IP addresses; I run email and web servers from both. I'm planning to move (most of) the web hosting to a DigitalOcean droplet, but I want to keep the email on my own hardware in my own home. I'm also wanting to implement VLAN tagging to segregate the Internet-addressable interfaces from purely local machines and also from the IoT devices and security cameras which may (probably do) have vulnerabilities.
So in this question I'm mainly asking for recommendations on how to set up my server and clients in the two networks (plus, quite likely the LAMP droplet) and links to a suitable tutorial. Related, I'd like to find recommendations for generating certificates. I can use Let's Encrypt for the public access certificates as I don't do any e-commerce, and if I set up some kind of shop in future I can get a reasonable price from my domain registrar. However, I want to use a private certificate authority for the VPN certificates and also for access to the in-house functions, either from LAN or from outside. I'd also want to use the private CA to generate and self-sign identifying certificates for encrypted email. Can some of the more experienced members point me in the right direction? Thanks in advance.
