I'm looking to build a remote offsite backup to securely backup my most important files over the internet to a (kind of dumb) NAS. I have an old Netgear ReadyNas pro 6 that doesn't do a whole lot other than basic file sharing protocols and I can probably setup rsync on it. Firmware is so old that I can't even upgrade it anymore. But I figured it'd probably be perfect for my remote offsite backup just in case sh*t hit the fan at home. I have a trusted friend that is willing to host my NAS in exchange for hosting his. He knows basic networking and might be able to help me out with my own VLAN in his network.
My question is, how would be the best way to bring it's connection back to me securely. I was thinking I can throw openVPN or something on a raspberry PI and use that to interface with the NAS but not sure if there is a more elegant solution. My requirements are that it needs to be secure, hands off (I'd hope not to have to update software or certs too frequently), plug and play with auto starting, in case of a power failure and stable. He lives far from me so it'd be a pain to have to travel to fix any issues. This would sync with my main NAS hosted on a TrueNas server.