The great firewall isn’t designed to protect those inside from the outside. It is designed to isolate those inside from getting outside. It’s like saying a prison wall is there to protect the prisoners from invaders. Sure in Fallout they worked out to be useful for that, but that isnt what it was built for and would have needed modifications like turning the barbed wire outwards to make it work for that purpose better.
Yeah, the system was on a single server at first and eventually expanded to either a docker swarm or Kubernetes cluster. So the single server acts as both a docker host and an NFS server.
I’ve had this happen multiple times, so I use this pattern by default. Mostly these are volumes with just config files and other small stuff that it’s OK if it’s duplicated in the docker cache. If it is something like large image caches or videos or other volumes that I know will end up very large then I probably would have started with storage off the server in the beginning. It saves a significant amount of time to not have to reconfigure everything as it expands if I just have a template that I use from the start.