Need help with my Nas
Hi everyone,
I run a flooring contracting business and I’m currently optimizing my workflow for handling field photography. I have a Ugreen DXP6800 Pro NAS at home, and I’m looking for a robust way to sync project photos from my crew's phones directly to the server.
The Workflow Requirements:
Instant Offloading: I need a solution where my workers can snap photos on-site, have them immediately upload to a specific folder on my NAS, and—this is critical—automatically clear the images from their local device storage immediately after the upload is confirmed. I want to ensure privacy and save storage space on their phones.
Security & Access: I’m already using Tailscale for remote access. I want to provide "zero-trust" access to my crew, meaning they should only be able to reach the specific folder/service needed for uploads, without having any access to my home network, admin dashboards, or personal data.
Low-Friction for Crew: The upload process needs to be seamless. I want a "set it and forget it" solution—they take the photo, the app handles the rest in the background.
My Tech Stack:
Hardware: Ugreen DXP6800 Pro NAS.
Networking: Tailscale.
Media Management: Immich (currently using it for my personal archive).
My Questions:
Best App/Client: What is the most reliable mobile app/client that supports "upload and delete from local" functionality seamlessly over a VPN (Tailscale)?
Access Control (ACLs): What is the best practice for using Tailscale ACLs to restrict my workers' access so they can only write to a specific share without exposing the rest of my NAS?
Permissions: How should I structure the folder permissions to ensure they can write new files but not rename, delete, or modify existing project archives?
Integration: Has anyone successfully automated this "upload -> Immich" pipeline? Ideally, I'd like the photos to land in a specific folder and be automatically picked up by an Immich External Library.
Any advice on software, specific app configurations, or security setups for this kind of "field-to-server" workflow would be greatly appreciated!