Seeking guidance: Approaches to robust security on top of OMV

I just installed OMV v7 to be used mainly as video and picture repository (but also have a collection of various types of files to be stored). I am in the process of adding a second hard drive in a RAID 1 configuration. I want to allow a few users to access/use OMV from remote locations on the internet.

What are some recommended (good) security implementation guides/packages/approaches to secure OMV when exposed to the internet?
I could not find any 'how to's' in the Guides section of the forum

I just started investigating security approaches and one package that looks promising is Zerotier. Comments on integration with OMV?

I want a really good way to lockdown the OMV server.

Thanks for any help.

Quote from gderf

Be more specific.

I want a user (one denoted in the access control list or what ever method OMV uses to specify people that can access OMV)) to be able to transfer files from their machine to my OMV or have them download files from OMV to their machine.

Quote from chente

For that specific purpose, I would install Nextcloud on Docker. That's what I do on my server.

Did you look at the wiki?

https://wiki.omv-extras.org/

https://wiki.omv-extras.org/do…#nextcloud_aio_all_in_one

Right, I did look at next cloud. Thanks. What if I as owner/admin, want to access OMV remotely (outside my LAN) for what ever reason, maybe to retrieve an important file that I need, do maintenance, etc. (use SSH?)

So you are saying that within a OMV I can run Nextcloud under docker? but wouldn't I have the same security concerns - or would that be handled in nextcloud? (BTW, I installed OMV on a bare metal server box (HP Microserver).