@fastfinge
Nah, NFS 4 is a MODERN protocol, unlike SMB for example which is much more janky. Real encrypted SMB only became a widespread thing less than 10 years ago or so.
What you want specifically is NFS 4 with Kerberos and either sec=krb5i or sec=krb5p
krb5p is suitable for direct over the internet sharing. krb5i is suitable if the NFS goes over VPN.
@modulux