@djsumdog @piggo I don't even bother with NFS. It's an outdated protocol and a huge security liability. Wireguard can help for sure, but it's a sloppy Band-Aid.

Unfortunately SSHFS isn't perfect, either. There is one maintainer, and he doesn't have time to really fix issues. https://github.com/libfuse/sshfs?tab=readme-ov-file#development-status

Maybe there's a native mTLS file-sharing solution that doesn't require layer-3 finagling (a la Wireguard) but which still guarantees transport security.