I'm thinking about acquiring a NAS from Synology (or QNap), these are pretty cool NAS and do much more than just storing files. Some extras include:
- ssh, ftp, telnet, mail servers
- photo gallery (directly from the NAS!)
- mysql/php (can even run a website from there)
- and much more
On the specs side it looks awesome as a LAN server but it's possible to access those services also from the Internet. And now, I'm wondering how safe that is, considering you're actually putting multiple servers and, not to forget, all your personal files stored in that device, on the Internet.
I've done a bit a research and ssh access could be hardened using 2-step authentication, but not sure about the other services, unless they all have to go through ssh?
I would appreciate your view on this and other possible ways to make your home NAS secure.