[https://www.wundertech.net/how-to-secure-a-synology-nas-tutorial/](https://www.wundertech.net/how-to-secure-a-synology-nas-tutorial/)

2. Enable 2-factor authentication for all admins
3. Disable ssh
4. Enable auto block
5. Auto update
6. Expose to outside:
    
    1. Vpn is best. username pw and certificate
    2. Open ports
    3. Reverse proxy cloudflare
7. Install snapshot replication app and enable