19 votes

Synology NAS owners: any tips for a beginner?

My new Synology DS923+ should be delivered next week, together with 3x6TB drives for a RAID5 setup, 32GB of RAM, 2x1TB NVMe drives and an APC UPS. It's almost certainly overkill as I'll be using the NAS mainly for automated backups (of computers, web servers and cloud services) and as general file storage, although I will also be looking into file syncing, running background scripts, using the NAS as a light development server, and maybe also for surveillance cameras.

Any tips for a beginner? I can find my way around most modern desktop and server systems but I have never set up or maintained a NAS. Are there uses for the system that no one talks about but which you have personally found incredibly useful?

24 comments

  1. [11]
    domukin
    (edited )
    Link
    I’ve had a couple of synology NAS’s for about 8 years or so. I couple of things that come to mind: 32gb of ram is probably overkill! Moreover synology likes a certain type of error correcting ram...

    I’ve had a couple of synology NAS’s for about 8 years or so.
    I couple of things that come to mind:

    1. 32gb of ram is probably overkill! Moreover synology likes a certain type of error correcting ram and will prompt a warning if you buy non-synology modules. I have 4+4 gb and it’s plenty for my use case.
    2. Label your HDDs with regards to what slot they occupy in the NAS. You may have to replace the NAS and apparently the order is important.
    3. You turn off the unit by holding the power button til it beeps and flashes the led (it’ll start a safe shut down procedure, won’t just cut the power like a pc would). You can also shutdown using the browser.
    4. You can install apps including docker - which opens lots of possibilities. I have jellyfin (media server) as well as Usenet apps.
    5. Take advantage of users and privileges… for example, you should have a “user” just for backups, this allows you to set a limit to what share folders can be accessed and how much storage they get. It’ll prevent you or someone else from deleting things by accident.
    6. If you chose to encrypt your shared folders, make sure to save the keys somewhere else.
    7. I’ve used SHR and really, really like it. Make sure you know the differences between RAID 5 and SHR.
    9 votes
    1. [10]
      vili
      Link Parent
      Brilliant, thanks for all the tips! A lot of really good suggestions there that I need to keep in mind. Yeah, it's definitely too much, but I came to the conclusion that I need more than the...

      Brilliant, thanks for all the tips! A lot of really good suggestions there that I need to keep in mind.

      32gb of ram is probably overkill! Moreover synology likes a certain type of error correcting ram and will prompt a warning if you buy non-synology modules.

      Yeah, it's definitely too much, but I came to the conclusion that I need more than the provided 4GB, and if I have two modules I prefer to have a pair of the same modules (although I'm not sure if it's still needed these days) and the price difference between 8+8 and 16+16 was so small that I thought I might just as well max the RAM.

      I also spent quite a lot of time researching RAM compatibility for this model, and if everything went right, I should be getting RAM that the NAS both accepts and doesn't complain about. It's not ECC RAM though, but I couldn't find non-complaining ECC sticks where I live.

      I have jellyfin

      I'm currently running a Jellyfin server from a Raspberry Pi and will likely eventually move it to the NAS. Is there anything that pops into your head that I should be aware of before I do that, I mean the sort of silent knowledge that isn't covered in online tutorials and documentation?

      1 vote
      1. [2]
        domukin
        Link Parent
        I did a new install so I don’t know about transferring any of the data from one jellyfin server to another unfortunately. The only issue I have is that jellyfin won’t auto-run after a NAS restart...

        I did a new install so I don’t know about transferring any of the data from one jellyfin server to another unfortunately. The only issue I have is that jellyfin won’t auto-run after a NAS restart , I believe it is a setting on docker but I haven’t spent too much time on it.

        2 votes
        1. vili
          Link Parent
          Thanks! Fortunately, my collection is small enough that I can just do a new install and copy the files from the Raspberry Pi to the NAS. Maybe if the NAS ends up feeling a final enough solution it...

          Thanks! Fortunately, my collection is small enough that I can just do a new install and copy the files from the Raspberry Pi to the NAS. Maybe if the NAS ends up feeling a final enough solution it will also finally inspire me to rip the rest of my DVDs and Blu-Rays.

      2. [5]
        JXM
        Link Parent
        Be aware that the new 923 doesn’t support hardware transcoding/decoding like the previous models did. If you’re doing any sort of transcoding, be prepared for some terrible playback.

        Be aware that the new 923 doesn’t support hardware transcoding/decoding like the previous models did. If you’re doing any sort of transcoding, be prepared for some terrible playback.

        2 votes
        1. [4]
          vili
          Link Parent
          Thanks! That's a good point and something I looked into before ordering. I don't think it should be an issue for me (fingers crossed). My current setup with a Raspberry Pi 4 isn't transcoding...

          Thanks! That's a good point and something I looked into before ordering. I don't think it should be an issue for me (fingers crossed). My current setup with a Raspberry Pi 4 isn't transcoding either, and I haven't had issues. I just watch 480p/720p/1080p content with my Nvidia Shield on my 1080p television.

          1. [3]
            JXM
            Link Parent
            I figured I’d mention it since I’ve seen a few posts in the Synology subreddit from people who didn’t realize that until after they tried to run Plex. If you’re playing back on a Shield, then...

            I figured I’d mention it since I’ve seen a few posts in the Synology subreddit from people who didn’t realize that until after they tried to run Plex.

            If you’re playing back on a Shield, then you’re good. It can basically play anything natively.

            1 vote
            1. [2]
              st3ph3n
              Link Parent
              A lot of very cheap modern Android-based TV devices have native AV1/h265 support in hardware, but a snag some people may run into (and I certainly did) is that whatever software you're running...

              A lot of very cheap modern Android-based TV devices have native AV1/h265 support in hardware, but a snag some people may run into (and I certainly did) is that whatever software you're running might not know to take advantage of that hardware support, which is what happened to me with the Jellyfin Android TV client. Fortunately Jellyfin supports the use of external players, so I just downloaded one that does work with the hardware support for those formats and it's all good now - no transcoding necessary. That suits me, as I'm running everything from a DS220+, which has a pretty weak CPU.

              My NAS is basically how I back up everything in my house, and also hosts my media library. I tried running a pihole on it too, but it was a pain in the ass to get it running with a separate IP address to the NAS itself and it broke when I got a DSM update, so I went back to hosting that on a separate Raspberry Pi 3 that I had laying around.

              1. JXM
                Link Parent
                True, but OP said they're using a Shield. That can basically play anything. I've noticed that a lot of those cheaper Android devices might support h.265 but they are lacking in audio codec...

                True, but OP said they're using a Shield. That can basically play anything.

                I've noticed that a lot of those cheaper Android devices might support h.265 but they are lacking in audio codec support, especially Dolby or DTS.

                1 vote
      3. [2]
        BHSPitMonkey
        Link Parent
        I switched from a homegrown Pi-like server/NAS to a Synology this year. Moving my various Docker Compose stacks was mostly seamless — I just had to migrate from "docker compose" to the somewhat...

        I switched from a homegrown Pi-like server/NAS to a Synology this year. Moving my various Docker Compose stacks was mostly seamless — I just had to migrate from "docker compose" to the somewhat older "docker-compose", update paths to volumes, and fix ownership/permissions in a few places. I'm not sure why GP's containers don't start automatically at boot; that hasn't been a problem for me.

        My containers include Home Assistant with Zigbee/Z-Wave coordinators, which include a USB dongle that needs to be mounted. By default in Synology the OS won't create the serial USB devices in /dev/, but that can be fixed: https://github.com/robertklep/dsm7-usb-serial-drivers

        1 vote
        1. vili
          Link Parent
          This is great to know, I really appreciate the information. I'm learning so much in this thread, everyone's been absolutely wonderful with their time and expertise.

          This is great to know, I really appreciate the information.

          I'm learning so much in this thread, everyone's been absolutely wonderful with their time and expertise.

  2. [2]
    unkz
    Link
    Keep your firewall rules tight and make sure your patches are applied ASAP, they don’t have a great track record when it comes to security. I would personally disable any public access.

    Keep your firewall rules tight and make sure your patches are applied ASAP, they don’t have a great track record when it comes to security. I would personally disable any public access.

    3 votes
    1. vili
      Link Parent
      Thanks! I'm definitely planning to disable public access and in general follow the principles of least privilege. I will try to set up a VPN connection for file sync and whenever I need to access...

      Thanks! I'm definitely planning to disable public access and in general follow the principles of least privilege. I will try to set up a VPN connection for file sync and whenever I need to access the NAS from outside of my home network.

      To be honest, this side of the project is still a little bit of a question mark for me as network setups are not my strong suit. I'm sure I can figure it out but it's the part of the NAS experience that I'm looking forward to least. On the other hand, it will also be a learning experience.

  3. [3]
    first-must-burn
    Link
    Make sure you set up an email address so that the drive health monitor can send you periodic health updates as well as warnings when something is failing. I did not do this, and much time passed...

    Make sure you set up an email address so that the drive health monitor can send you periodic health updates as well as warnings when something is failing. I did not do this, and much time passed (as it does). I happened to log in one day to find both drives (raid 1 config) in an unhealthy state. Fortunately, I was able to plug in an external USB drive and copy everything off before replacing the drives.

    If you're feeling paranoid, you may want to consider buying drives from different manufacturers, or at least the same drive from different sources so that they will be from different batches. This can help with correlated drive failures due to a manufacturing defect.

    A useful thing I have set up is automated backups of my other cloud services (google drive, dropbox). There is a "no delete" option so that it only adds files that show up, but doesn't delete ones that are removed, which is handy to guard against someone accidentally or on purpose removing all your files from the cloud drive.

    3 votes
    1. [2]
      vili
      Link Parent
      Ah! Setting up an email address for monitoring goes to my list of things to do when the unit arrives. That's something I hadn't considered at all. Ha! I didn't realise it was a sign of paranoia, I...

      Ah! Setting up an email address for monitoring goes to my list of things to do when the unit arrives. That's something I hadn't considered at all.

      If you're feeling paranoid, you may want to consider buying drives from different manufacturers

      Ha! I didn't realise it was a sign of paranoia, I just thought it was the logical thing to do, so I got more or less matching drives from three different manufacturers (Synology, WD Red and Seagate IronWolf).

      1 vote
      1. first-must-burn
        Link Parent
        ... I was walking home one night and a guy hammering on a roof called me a paranoid little weirdo... in morse code... ~Emo Phillips

        ... I was walking home one night and a guy hammering on a roof called me a paranoid little weirdo... in morse code...

        ~Emo Phillips

  4. [2]
    natebc
    Link
    I've had 2 synos over the last 8 years or so and they've been fantastic. Started out with just a simple NAS on one of the J models and then got a 918+ when it came out. I run about 30 docker...

    I've had 2 synos over the last 8 years or so and they've been fantastic. Started out with just a simple NAS on one of the J models and then got a 918+ when it came out. I run about 30 docker containers via docker-compose on mine for various homelab type things. With 32GB on yours you'll almost certainly want to do something else with it as well just to get use out of it. The normal NAS operations barely use any RAM at all.

    Quick glance over my list is:

    ❯ docker ps --format '{{.Names}}'
    wx # static web server for weewx output
    weewx # process mqtt weather data from mqtt
    aw2mqtt # recieve weather station data 
    mosquitto # mqtt!
    bitwarden # password vault, it's actually vaultwarden
    traefik # docker aware proxy for all the webstuff
    loki # logs
    minio # s3 storage
    lychee # photo sharing
    photoprism # also photo sharing
    mariadb # smells like mysql
    act-runner # runs github actions locally
    gitea # web git system
    grafana # graphs!
    prometheus # data for graphs!
    prometheus-blackbox # get data for prom from weirdstuff
    node-exporter-fatty # present NAS data to prometheus
    promtail-fatty # get logs from NAS for loki
    keycloak # authentication, fancy.
    unifi-controller # keep the unifi crap in line
    dashy # try to be organized, fail
    step-ca # local certificate authority, supports acme
    speedtest-tracker-att # monitor speedtest for att internet
    speedtest-tracker-spectrum # monitor speedtest for spectrum internet
    alertmanager # alert me if any of this crap breaks
    coredns # fancy local DNS
    cloudflare-api # talk to cloudflare to rearrange dns and stuff
    cadvisor # provide container data to prometheus
    postgres # the other database server
    redis # it's just redis.
    
    2 votes
    1. vili
      Link Parent
      Wow, that's a really interesting list of things. I see I have plenty of homework to do to learn more about all of these. :) Thank you so much for taking the time to respond!

      Wow, that's a really interesting list of things. I see I have plenty of homework to do to learn more about all of these. :)

      Thank you so much for taking the time to respond!

      1 vote
  5. ewintr
    Link
    Some things I wish I'd known before I bought my 923+, or learned while using it: I wanted to save energy and have it automatically switch off when it is not in use (and start it up with WakeOnLan...

    Some things I wish I'd known before I bought my 923+, or learned while using it:

    1. I wanted to save energy and have it automatically switch off when it is not in use (and start it up with WakeOnLan when I need it). The term "in use" is a bit ambiguous with a server that runs all kinds of background stuff, but I was surprised at the list of things you need to disable before this works: https://kb.synology.com/en-us/DSM/tutorial/What_stops_my_Synology_NAS_from_entering_System_Hibernation
    2. I also maxed out the RAM with the idea of running Docker containers and Virtual Machines. This works nice, but for the VM's it is good to know that you are limited by the amount of CPU cores too. So even if you have the RAM, you still can't run twenty VM's. See this page for guidance: https://kb.synology.com/en-global/DSM/tutorial/How_many_virtual_machines_can_I_run_on_my_Synology_NAS
    3. The built in reverse proxy sucks if you want to do anything more than the most basic of things. My solution was to run a small Debian VM with nginx and direct all outside traffic to that instead. This worked perfectly. But then again, I have a some experience using nginx for this. It may not be the best solution for you.
    4. It is performant enough to run VM's, but be aware that some specific actions can be very slow. In my case things like running Debian's apt to upgrade the system, or building a Docker container where agonizing slow. I did not dig further, but I suspect that software often forces filesystem syncs, which I can imagine is a slow operation on a device like this because it has a lot of file caching machinery, lots of calculations for the RAID setup, etc. But this is all speculation on my side.
    5. In the end I decided I wanted to do the automated shutdown and wake up so I removed all containers and VM's. Then the goal becomes to have it start up when you want to access a file share, in my case mounting a folder in Linux over NFS. This has some gotchas and I plan to write a blog post about it, but actually there is already a good one about it here: https://dj-does.medium.com/nfs-mounts-and-wake-on-lan-25c0c1d55c90
    2 votes
  6. [5]
    bioemerl
    Link
    Some things I've had to consider setting these up myself: Make sure you don't treat the nas as a backup. Keep a third copy of your data, ideally something like an external hard drive you bring to...

    Some things I've had to consider setting these up myself:

    Make sure you don't treat the nas as a backup. Keep a third copy of your data, ideally something like an external hard drive you bring to your parents house or a friend's house or something that's not with you.

    Make sure you turn on any scanning for corruption That's available. You should have it doing the equivalent of a scrub where it seeks through all of your data and make sure there are no bit rot issues.

    The same is true for running smart tests. Make sure you're running those on the drives and that you have some form of alert when they fail so that you can replace them quickly.

    You may have trouble doing six terabyte drives in a raid 5. When a drive fails a rebuild of the raid can take up to a day or two, and that's the time that your other drives are the most likely to fail. It's probably going to be fine, but be double sure you keep a backup in case it happens.

    Assuming this is your plan, I wouldn't worry about using an SSD for caching/making your nas faster. You're probably going to be more limited by your network than your disk speed, because with a 1 gigabit per second network you can only write/read 125 megabytes per second onto the nas. Use those ssds for VMs instead.

    1 vote
    1. [4]
      vili
      Link Parent
      Thanks so much for all the great tips! Absolutely. For the data that is not in itself a backup of data that is stored elsewhere, I am considering either doing pretty much what you suggest, or...

      Thanks so much for all the great tips!

      Make sure you don't treat the nas as a backup. Keep a third copy of your data, ideally something like an external hard drive you bring to your parents house or a friend's house or something that's not with you.

      Absolutely. For the data that is not in itself a backup of data that is stored elsewhere, I am considering either doing pretty much what you suggest, or setting up automated encrypted snapshots or a sync to an AWS S3 bucket.

      When a drive fails a rebuild of the raid can take up to a day or two, and that's the time that your other drives are the most likely to fail.

      Assuming you didn't mean this just as a Murphy's law sort of a thing, why is this the time that the other drives are most likely to fail?

      Assuming this is your plan, I wouldn't worry about using an SSD for caching/making your nas faster. ... Use those ssds for VMs instead.

      VMs and container use was indeed what I was planning to use the SSDs for. My first test case will likely be seeing if I can set up my RSS server (FreshRSS) on the NAS, rather than running it on the same web server as my websites, like I currently do.

      1 vote
      1. first-must-burn
        Link Parent
        Not the parent poster, but usually this is because the restore activity is much more intensive than the normal drive activity, and that can be enough to fail a drive that is already marginal.

        Assuming you didn't mean this just as a Murphy's law sort of a thing, why is this the time that the other drives are most likely to fail?

        Not the parent poster, but usually this is because the restore activity is much more intensive than the normal drive activity, and that can be enough to fail a drive that is already marginal.

        4 votes
      2. [2]
        bioemerl
        Link Parent
        For two reasons. The first is that you tend to buy them at the exact same time, and when you buy them at the same time and one of them fails, the others are probably on the way soon too. The...

        Assuming you didn't mean this just as a Murphy's law sort of a thing, why is this the time that the other drives are most likely to fail?

        For two reasons. The first is that you tend to buy them at the exact same time, and when you buy them at the same time and one of them fails, the others are probably on the way soon too.

        The second reason is that a rebuild requires you read every single bite of the other two drives in order to write all of those bytes to the third one. That's a lot of activity, especially if you're using it at the time so they normally have to read all of their data, they also have to seek around to whatever you want out of it too.

        2 votes
        1. CptBluebear
          Link Parent
          This is why I staggered my HDD buys for my NAS by at least a couple of months each. They're all different serials even if they're the same model. A single bad batch may destroy all of your drives...

          This is why I staggered my HDD buys for my NAS by at least a couple of months each. They're all different serials even if they're the same model. A single bad batch may destroy all of your drives at once if you bought them at the same time.

          2 votes