Secure remote access to your NAS with Tailscale
Setting up Tailscale as a WireGuard mesh VPN to access your NAS and entire local network from anywhere, without opening ports.
- Published on
- 6 min read
Setting up Tailscale as a WireGuard mesh VPN to access your NAS and entire local network from anywhere, without opening ports.
Recovering an existing Synology RAID on Debian: Btrfs patch, eCryptFS decryption and automatic mounting with mdadm + LVM detection.
Over 40 sysctl parameters, module blacklisting, GRUB settings and filesystem hardening to achieve CIS Level 2 security on Debian.
Setting up UFW with deny-by-default and Fail2ban with progressive bans to effectively protect a Debian NAS against network intrusions.
Configuring OpenSSH with post-quantum key exchanges (ML-KEM768, sntrup761), Ed25519 keys, and hardened authentication for your NAS.
How to create a custom Debian ISO with preseed for a fully automated NAS installation on a TerraMaster, from boot to first SSH connection.