@cynicalsecurity I think "some form of NFS" deserves some focus. I haven't thought about this but seen enough NFS induced vulns to say NFS probably won't be it. You ruled out SMB. What are the alternatives?
(We have some nice setups with MinIO, but wrapping everything with HTTP doesn't feel right either)