Hello Engineers,
I'm currently testing a self-hosted file-sharing solution, Syncthing. Below is a list of options that help achieve a reasonably secure configuration.
I haven't described these options in detail, all of them can be found in the documentation. Settings -> General -> Device name -> Fill in the device name
Settings -> General -> Anonymous Usage Reporting -> Disable
Settings -> GUI -> Start Browser -> Disable
Advanced -> GUI -> Address -> Fill in the local network interface ip address
Advanced -> GUI -> Enabled -> Leave Enabled
Advanced -> GUI -> Password -> Fill in (password to log in to the GUI)
Advanced -> GUI -> Use TLS -> Enable
Advanced -> GUI -> User -> Fill in a user name (user to log in to the GUI)
Advanced -> Options -> Always Local Nets -> Fill in a local network interface
Advanced -> Options -> Announce LAN Address -> Disable
Advanced -> Options -> Crash reporting Enabled -> Disable
Advanced -> Options -> Global Announce Enabled -> Disable
Advanced -> Options -> Nat Enabled -> Disable
Advanced -> Options -> Relays Enabled -> Disable
Advanced -> Options -> Local Announce enabled -> Enabled by default, should be enabled only if local address explicitly specified by the option "Always Local Nets"
Advanced -> Options -> Overwrite Remote Device Names On -> Enable
Advanced -> Options -> Listen Address -> Left default