diff --git a/cmd/node/main.go b/cmd/node/main.go
index 07381946d..b1f9a04a4 100644
--- a/cmd/node/main.go
+++ b/cmd/node/main.go
@@ -524,7 +524,7 @@ func main() {
 
 	// Storage service for Gateway
 	if conf.Mode == types.ModeGateway || conf.Mode == types.ModeCensus {
-		srv.Storage, err = srv.IPFS(conf.Ipfs)
+		srv.Storage, err = service.IPFS(conf.Ipfs)
 		if err != nil {
 			log.Fatal(err)
 		}
diff --git a/config/config.go b/config/config.go
index 6e5cd39fb..98d2acf06 100644
--- a/config/config.go
+++ b/config/config.go
@@ -81,6 +81,9 @@ type IPFSCfg struct {
 	ConnectKey string
 	// ConnectPeers is the list of ipfsConnect peers
 	ConnectPeers []string
+	// LocalDiscovery enables IPFS to communicate with other nodes in local networks (192.168.0.0/16 and such).
+	// Disabled by default since it creates issues in production deployments, but needed in test environments
+	LocalDiscovery bool
 }
 
 // VochainCfg includes all possible config params needed by the Vochain
diff --git a/data/data.go b/data/data.go
index 582f8942e..07a8e0f0d 100644
--- a/data/data.go
+++ b/data/data.go
@@ -3,16 +3,12 @@ package data
 
 import (
 	"context"
-	"fmt"
 	"io"
-
-	"go.vocdoni.io/dvote/data/ipfs"
-	"go.vocdoni.io/dvote/types"
 )
 
 // Storage is the interface that wraps the basic methods for a distributed data storage provider.
 type Storage interface {
-	Init(d *types.DataStore) error
+	Init() error
 	Publish(ctx context.Context, data []byte) (string, error)
 	PublishReader(ctx context.Context, data io.Reader) (string, error)
 	Retrieve(ctx context.Context, id string, maxSize int64) ([]byte, error)
@@ -24,41 +20,3 @@ type Storage interface {
 	Stats() map[string]any
 	Stop() error
 }
-
-// StorageID is the type for the different storage providers.
-// Currently only IPFS is supported.
-type StorageID int
-
-const (
-	// IPFS is the InterPlanetary File System.
-	IPFS StorageID = iota + 1
-)
-
-// StorageIDFromString returns the Storage identifier from a string.
-func StorageIDFromString(i string) StorageID {
-	switch i {
-	case "IPFS":
-		return IPFS
-	default:
-		return -1
-	}
-}
-
-// IPFSNewConfig returns a new DataStore configuration for IPFS.
-func IPFSNewConfig(path string) *types.DataStore {
-	datastore := new(types.DataStore)
-	datastore.Datadir = path
-	return datastore
-}
-
-// Init returns a new Storage instance of type `t`.
-func Init(t StorageID, d *types.DataStore) (Storage, error) {
-	switch t {
-	case IPFS:
-		s := new(ipfs.Handler)
-		err := s.Init(d)
-		return s, err
-	default:
-		return nil, fmt.Errorf("bad storage type or DataStore specification")
-	}
-}
diff --git a/data/datamocktest.go b/data/datamock/datamock.go
similarity index 94%
rename from data/datamocktest.go
rename to data/datamock/datamock.go
index 2ed3f0e1a..89554e728 100644
--- a/data/datamocktest.go
+++ b/data/datamock/datamock.go
@@ -1,4 +1,4 @@
-package data
+package datamock
 
 import (
 	"context"
@@ -8,11 +8,13 @@ import (
 	"sync"
 	"time"
 
+	"go.vocdoni.io/dvote/data"
 	"go.vocdoni.io/dvote/data/ipfs"
 	"go.vocdoni.io/dvote/test/testcommon/testutil"
-	"go.vocdoni.io/dvote/types"
 )
 
+var _ data.Storage = &DataMockTest{}
+
 // DataMockTest is a mock data provider for testing purposes.
 type DataMockTest struct {
 	files   map[string]string
@@ -21,7 +23,7 @@ type DataMockTest struct {
 	rnd     testutil.Random
 }
 
-func (d *DataMockTest) Init(_ *types.DataStore) error {
+func (d *DataMockTest) Init() error {
 	d.files = make(map[string]string)
 	d.prefix = "ipfs://"
 	d.rnd = testutil.NewRandom(0)
diff --git a/data/downloader/downloader_test.go b/data/downloader/downloader_test.go
index bc7aac0e8..bfbb6ca23 100644
--- a/data/downloader/downloader_test.go
+++ b/data/downloader/downloader_test.go
@@ -4,12 +4,12 @@ import (
 	"testing"
 
 	qt "github.com/frankban/quicktest"
-	"go.vocdoni.io/dvote/data"
+	"go.vocdoni.io/dvote/data/datamock"
 )
 
 func TestDownloader(t *testing.T) {
-	stg := data.DataMockTest{}
-	stg.Init(nil)
+	stg := datamock.DataMockTest{}
+	stg.Init()
 	d := NewDownloader(&stg)
 	d.Start()
 	qt.Assert(t, d.QueueSize(), qt.Equals, int32(0))
diff --git a/data/ipfs/init.go b/data/ipfs/init.go
index 6be4be748..363d7f4aa 100644
--- a/data/ipfs/init.go
+++ b/data/ipfs/init.go
@@ -48,7 +48,7 @@ func init() {
 }
 
 // Init initializes the IPFS node and repository.
-func initRepository() error {
+func initRepository(enableLocalDiscovery bool) error {
 	daemonLocked, err := fsrepo.LockedByOtherProcess(ConfigRoot)
 	if err != nil {
 		return err
@@ -66,13 +66,21 @@ func initRepository() error {
 	if err := installDatabasePlugins(); err != nil {
 		return err
 	}
-	_, err = doInit(io.Discard, ConfigRoot, 2048)
+	_, err = doInit(io.Discard, ConfigRoot, 2048, enableLocalDiscovery)
 	return err
 }
 
 // StartNode starts the IPFS node.
-func startNode() (*ipfscore.IpfsNode, coreiface.CoreAPI, error) {
+func (i *Handler) startNode() (*ipfscore.IpfsNode, coreiface.CoreAPI, error) {
 	log.Infow("starting IPFS node", "config", ConfigRoot)
+
+	// check if needs init
+	if !fsrepo.IsInitialized(ConfigRoot) {
+		if err := initRepository(i.EnableLocalDiscovery); err != nil {
+			return nil, nil, err
+		}
+	}
+
 	r, err := fsrepo.Open(ConfigRoot)
 	if errors.Is(err, fsrepo.ErrNeedMigration) {
 		log.Warn("Found outdated ipfs repo, migrations need to be run.")
@@ -180,7 +188,7 @@ var installDatabasePlugins = sync.OnceValue(func() error {
 	return nil
 })
 
-func doInit(out io.Writer, repoRoot string, nBitsForKeypair int) (*config.Config, error) {
+func doInit(out io.Writer, repoRoot string, nBitsForKeypair int, enableLocalDiscovery bool) (*config.Config, error) {
 	log.Infow("initializing new IPFS repository", "root", repoRoot)
 	if err := checkWritable(repoRoot); err != nil {
 		return nil, err
@@ -195,10 +203,12 @@ func doInit(out io.Writer, repoRoot string, nBitsForKeypair int) (*config.Config
 		return nil, err
 	}
 
-	conf.Discovery.MDNS.Enabled = false
-
+	// Apply `server` configuration profile:
+	// Disables local host discovery, recommended when running IPFS on machines with public IPv4 addresses
 	// Prevent from scanning local networks which can trigger netscan alerts.
 	// See: https://github.com/ipfs/kubo/issues/7985
+	conf.Discovery.MDNS.Enabled = false
+	conf.Swarm.DisableNatPortMap = true
 	conf.Swarm.AddrFilters = []string{
 		"/ip4/10.0.0.0/ipcidr/8",
 		"/ip4/100.64.0.0/ipcidr/10",
@@ -217,6 +227,14 @@ func doInit(out io.Writer, repoRoot string, nBitsForKeypair int) (*config.Config
 		"/ip6/fc00::/ipcidr/7",
 		"/ip6/fe80::/ipcidr/10",
 	}
+	conf.Addresses.NoAnnounce = conf.Swarm.AddrFilters
+
+	if enableLocalDiscovery {
+		conf.Discovery.MDNS.Enabled = true
+		conf.Swarm.DisableNatPortMap = false
+		conf.Swarm.AddrFilters = []string{}
+		conf.Addresses.NoAnnounce = []string{}
+	}
 
 	if err := fsrepo.Init(repoRoot, conf); err != nil {
 		return nil, err
diff --git a/data/ipfs/ipfs.go b/data/ipfs/ipfs.go
index 05ac211ae..e25434826 100644
--- a/data/ipfs/ipfs.go
+++ b/data/ipfs/ipfs.go
@@ -24,16 +24,17 @@ import (
 	"github.com/ipfs/kubo/core/corehttp"
 	"github.com/ipfs/kubo/core/corerepo"
 	"github.com/ipfs/kubo/core/coreunix"
-	"github.com/ipfs/kubo/repo/fsrepo"
 	ipfscrypto "github.com/libp2p/go-libp2p/core/crypto"
 	ma "github.com/multiformats/go-multiaddr"
 	manet "github.com/multiformats/go-multiaddr/net"
 	"github.com/multiformats/go-multicodec"
 	"github.com/multiformats/go-multihash"
+	"go.vocdoni.io/dvote/data"
 	"go.vocdoni.io/dvote/log"
-	"go.vocdoni.io/dvote/types"
 )
 
+var _ data.Storage = &Handler{}
+
 const (
 	// MaxFileSizeBytes is the maximum size of a file to be published to IPFS
 	MaxFileSizeBytes = 1024 * 1024 * 100 // 100 MB
@@ -48,6 +49,9 @@ type Handler struct {
 	DataDir  string
 	LogLevel string
 
+	EnableLocalDiscovery bool
+	// TODO: Replace DataDir, LogLevel and EnableLocalDiscovery with a config.IPFSCfg?
+
 	retrieveCache *lru.Cache[string, []byte]
 
 	// cancel helps us stop extra goroutines and listeners which complement
@@ -56,8 +60,13 @@ type Handler struct {
 	maddr  ma.Multiaddr
 }
 
+// New returns a Handler
+func New() *Handler {
+	return &Handler{}
+}
+
 // Init initializes the IPFS node handler and repository.
-func (i *Handler) Init(d *types.DataStore) error {
+func (i *Handler) Init() error {
 	if i.LogLevel == "" {
 		i.LogLevel = "ERROR"
 	}
@@ -65,16 +74,10 @@ func (i *Handler) Init(d *types.DataStore) error {
 	if err := installDatabasePlugins(); err != nil {
 		return err
 	}
-	ConfigRoot = d.Datadir
+	ConfigRoot = i.DataDir
 	os.Setenv("IPFS_FD_MAX", "4096")
 
-	// check if needs init
-	if !fsrepo.IsInitialized(ConfigRoot) {
-		if err := initRepository(); err != nil {
-			return err
-		}
-	}
-	node, coreAPI, err := startNode()
+	node, coreAPI, err := i.startNode()
 	if err != nil {
 		return err
 	}
@@ -93,7 +96,7 @@ func (i *Handler) Init(d *types.DataStore) error {
 		"pubKey", node.PrivateKey.GetPublic(),
 	)
 	// start http
-	cctx := cmdCtx(node, d.Datadir)
+	cctx := cmdCtx(node, i.DataDir)
 	cctx.ReqLog = &ipfscmds.ReqLog{}
 
 	gatewayOpt := corehttp.GatewayOption(corehttp.WebUIPaths...)
@@ -126,7 +129,6 @@ func (i *Handler) Init(d *types.DataStore) error {
 
 	i.Node = node
 	i.CoreAPI = coreAPI
-	i.DataDir = d.Datadir
 	i.retrieveCache, err = lru.New[string, []byte](RetrievedFileCacheSize)
 	if err != nil {
 		return err
diff --git a/service/ipfs.go b/service/ipfs.go
index b80459df1..effa50833 100644
--- a/service/ipfs.go
+++ b/service/ipfs.go
@@ -12,14 +12,18 @@ import (
 )
 
 // IPFS starts the IPFS service
-func (vs *VocdoniService) IPFS(ipfsconfig *config.IPFSCfg) (storage data.Storage, err error) {
+func IPFS(ipfsconfig *config.IPFSCfg) (storage data.Storage, err error) {
 	log.Info("creating ipfs service")
 	os.Setenv("IPFS_FD_MAX", "1024")
-	ipfsStore := data.IPFSNewConfig(ipfsconfig.ConfigPath)
-	storage, err = data.Init(data.StorageIDFromString("IPFS"), ipfsStore)
+
+	ipfsStore := ipfs.New()
+	ipfsStore.DataDir = ipfsconfig.ConfigPath
+	ipfsStore.EnableLocalDiscovery = ipfsconfig.LocalDiscovery
+	err = ipfsStore.Init()
 	if err != nil {
-		return
+		return nil, err
 	}
+	storage = ipfsStore
 
 	go func() {
 		for {
@@ -40,5 +44,5 @@ func (vs *VocdoniService) IPFS(ipfsconfig *config.IPFSCfg) (storage data.Storage
 		}
 		ipfsconn.Start()
 	}
-	return
+	return storage, nil
 }
diff --git a/test/testcommon/api.go b/test/testcommon/api.go
index 55720231a..38095937f 100644
--- a/test/testcommon/api.go
+++ b/test/testcommon/api.go
@@ -9,10 +9,10 @@ import (
 	"go.vocdoni.io/dvote/api/censusdb"
 	"go.vocdoni.io/dvote/crypto/ethereum"
 	"go.vocdoni.io/dvote/data"
+	"go.vocdoni.io/dvote/data/datamock"
 	"go.vocdoni.io/dvote/db"
 	"go.vocdoni.io/dvote/db/metadb"
 	"go.vocdoni.io/dvote/httprouter"
-	"go.vocdoni.io/dvote/types"
 	"go.vocdoni.io/dvote/vochain"
 	"go.vocdoni.io/dvote/vochain/indexer"
 	"go.vocdoni.io/dvote/vochain/vochaininfo"
@@ -44,8 +44,8 @@ func (d *APIserver) Start(t testing.TB, apis ...string) {
 	}
 
 	// create the IPFS storage
-	d.Storage = &data.DataMockTest{}
-	d.Storage.Init(&types.DataStore{Datadir: t.TempDir()})
+	d.Storage = &datamock.DataMockTest{}
+	d.Storage.Init()
 
 	// create the API router
 	router := httprouter.HTTProuter{}
diff --git a/types/types.go b/types/types.go
index 54fc5e303..79835cfe2 100644
--- a/types/types.go
+++ b/types/types.go
@@ -1,9 +1,5 @@
 package types
 
-type DataStore struct {
-	Datadir string
-}
-
 // TODO: use an array, and possibly declare methods to encode/decode as hex.
 
 type ProcessID = []byte
diff --git a/vocone/vocone.go b/vocone/vocone.go
index e84dc878b..8d6e452bf 100644
--- a/vocone/vocone.go
+++ b/vocone/vocone.go
@@ -107,10 +107,11 @@ func NewVocone(dataDir string, keymanager *ethereum.SignKeys, disableIPFS bool,
 
 	// Create the IPFS storage layer
 	if !disableIPFS {
-		vc.Storage, err = vc.IPFS(&config.IPFSCfg{
-			ConfigPath:   filepath.Join(dataDir, "ipfs"),
-			ConnectKey:   connectKey,
-			ConnectPeers: connectPeers,
+		vc.Storage, err = service.IPFS(&config.IPFSCfg{
+			ConfigPath:     filepath.Join(dataDir, "ipfs"),
+			ConnectKey:     connectKey,
+			ConnectPeers:   connectPeers,
+			LocalDiscovery: true, // vocone is not intended to be deployed in server env. if needed we could turn this into a flag
 		})
 		if err != nil {
 			return nil, err