[bambax]

The web server of the nas is exposed to the Internet (port forwarding of 80 from the router to the nas); the rest of the nas is not exposed / not accessible from outside the LAN.

The images that are published are low-res versions copied to a directory on a partition accessible to the web server.

This is not the safest solution, as it does punch a hole in the lan... It's kind of an experiment... We'll see how it goes.