Migration and new network schema

Hello,

I want to migrate my current standalone NextCloud server to a 3 VM schema with pfSense that has haProxy package.
3 VM:

  • Nextcloud frontend
  • mariadb (image is wrong)
  • NFS Storage with Samba (any other ideas for the storage will be more than welcome)

A general concept is to have frontend network with NextCloud and then 2 servers in a another network that NextCloud will only have access to certain ports.

With this in mind, I have questions that I didn’t find anywhere so hoping that someone shed some light into this.

NextCloud frontend will always need an webserver or haProxy can manage that?

if there is a need for webserver lets say nginx can I change the default 443 to something else or docker as a better usage for this scenario?

From docker perspective how is the upgrade done? (OS and app)

I know that is possible to have a connection from the docker to 2 normal server without docker.
As anyone used this concept? Does it have constrains or no issues at all and works as expected?

As far as security from the NextCloud front end only ports 3306 for database and 139 for SMB need to open? are there are any other ports between front end and back end?

As a migration stand point since I’m starting fresh what is the best way to migrate it?

Looking forward for your inputs.