NFS is insecure out of the box so typically tunnelled over TLS

Set up Kerberos, it will also give you correct file ownership and then you don’t need any additional tunnel.