If you absolutely need your NAS to be public, keep the access window as tiny as can be. One service, one port, and secure ...