Configuring Rsync Server with SSH tunnel and cert

I'm trying to set up omv to be an Rsync server and have for security an SSH tunnel with certificate authentication. This is a must because password authentication is sent in the clear otherwise.

Nightmare. No ofense but the omv GUI is confusing as hell. Is this even possible with OMV?
This is a basic nas must have... doesn't seem too obvious via omv GUI.

How can I set up omv rsync server to work over certificate autheticated ssh?
Step-by-step instructions would be nice.

I ask for step-by-step because the gui has too many conflicting places to set what seems to be the same thing but perhaps not.
For example, I click Rsync-server-modules-add.

Now i see General page
there I see User (Description: This option specifies the user name that file transfers to and from that module should take place.)
So I select RsyncBackup in the drop down menu... I made this user already in omv main GUI users place.
However, after configuring everything else in General tab, I can't press save.
Next to general tab I see another tab called "Users". Ahhh... ok... wth... I already added a user on the previous tab. Confusing.
So I click that Users tab, in drop down I see RsyncBackup. Great, I select it. Guess what? Can't save again because apperently I need to overwrite the already assigned password for the RsyncBackup user. Why? I already gave RsyncBackup a password when I made him. So is RsyncBackup going to have a diff password for Rsync than in general? Confusing. Conflicting. Buggy. omv is riddled with frustrating things like this.

A good clear step-by-step guide would be greatly appreciated for getting such a basic backup setup working with omv.

Also, I should add that it isn't a great thing that when I try to search the forum for "backup" or "rsync", I get a too general search term error.

Cheers.

That is not what i said.

Rsync works on the client server model. Rsync clients can send data to Rsync servers. Rsync allows you to set a share folder (they call it path), and also allows you to set users and passwords in its config file.

When an Rsync client talks to an Rsync server, the username and password is sent in clear text and so is the data.

For this reasson it is recommended that one does no use Rsync authentication scheme but instead use Rsync servers via ssh. That is what I said.

Thank you for you answers. I'm still a little confused though.

I want to use SSH with a cert. How do I set that up in omv? Where do I add the rsa cert in omv and make ssh use that cert?

I see that there is a System--Certificates feature.
What is this?
If I add a cert here will SSH use it auto? If not, how do I set SSH to use a cert?

At Services--SSH
There is no way to select if ssh uses a cert and if so which cert it will use.

Right, but I need to hook up an rsa certificate to ssh for that, no? How do I do that. I don't see how I can give ssh in omv my rsa certificate and tell it to use it.

I know how to set up certs for ssh in linux. My question is about omv. You guys are always saying you want omv features to be configured via web interface. Well, that is what I am asking. How do I configure ssh in omv web interface to use a cert? There are no guides for this I looked.

I see you have a System--certificates page in web gui. What is for and how does it relate to ssh?

Ahh. Excellent.

So, just to be clear, can you please confirm these 4 points?

(A) Certs added at System--Certificates
is only for ssh.
(B) Even though the web gui lets you add more than one cert at System--Certificates
you shoud never add more than one because you have only 1 ssh in omv and if you add multiple certificates ssh wouldn't know which to use due to not having a way to configure this in web gui
(C) By adding my own cert at System-Certificates
I do not have to manually configure anything else (like adding.configuring manually in debian authorized_keys) and omv ssh will use my cert for ssh authentication and data encryption and it will not use any other cert (ex. the one that came with omv when I downloaded it).
(D) OMV only needs my public rsa key.

OK, excellent. Thank you for your help and patience so far.

I did as you say and now I can axs the web gui via ssl. However, this wasn't quite what I was after. Never the less, it is nice to have and know.

Hang in with me just a bit more... Here is what I really want to know.

What about Services--SSH ???

I have no way to select a cert for that in web gui.

That is what would be used durring Rsync session, no?
Because that is the SSH server, right?
So what certificate will that use?
How can I make that use my certificate?

So there is no way to change that via we gui?

I didn't install omv. I'm using a vm made by you. So my certs are not unique.

I am using a .5 vm. I guess one should install from iso then?