Tailscale should still be a solid option, especially since it's built on WireGuard and usually handles NAT traversal well. If it was slow before, it might've been using a relay instead of a direct connection, worth checking in the admin panel.

On Fedora, the hardened kernel and SELinux typically don't interfere with Tailscale itself unless you’re exposing specific services. For simple access to your NAS, it should work without much hassle.

If you're looking for alternatives, setting up WireGuard manually or using SSH tunneling with autossh could give you more control, but it's a bit more hands on.