My NAS (good ole' ix2) is behind an OpenWRT router which serves as the bastion host and I can reach the unit via ssh/rsync. The file structure is the same as the laptop. Very secure, very simple. Relevant ssh config entry:

Host ix2-5
Port 22
Hostname 192.168.1.244
ProxyCommand ssh -p 443 -W %h:%p ssh@home

Where home is the home router address. After that, the whole laptop can be synced with sudo -E rsync --exclude /run --exclude /sys --exclude /tmp --exclude /dev --exclude /proc -aqz / root@ix2-5:/nfs/Backups/veyron2/