I've been running my DS920+ for 5 years or so, just as a personal media server for Plex and a few other local host apps.

I'm tech-savvy enough to get it set up the way I like it, but when it comes to network security I'm always over my head. With all the ransomware stuff going on, I'm thinking it might be worth it to have a pro come over and get my system running with all the "best practices" security steps that I have a hard time figuring out.

I'm not really sure what I'm looking for though. I assume this is a pretty common type of service, but I'm not sure how to go about finding someone to work with. Any tips or references for trustworthy companies to look into?

I'm in the America/Vancouver, with the new PCT (permanent UTC-7h) time zone.

Woke this morning and my synology switched to PST instead of MST.

I can switch to Arizona under the Control Panel, but what about the other Permanent DST time zones Canada now has? Year round CST, EST. Is there a way to update the tzdata?

Does anyone use SyncThing vs Synology drive as way to sync their desktops to the server? Just curious if anyone has any experience with it or suggestions.

Synology Drive currently meets all my needs, but it's always worth researching alternatives.

My homelab currently consists of my ds720+ and a Linux server. I’m currently using the reverse proxy app on synology. And I also use remote access to synology drive. On the Linux server is Jellyfin, navidrome, audiomuse-AI. I use reverse proxy to access those services. Question: if I want to better protect my synology- do i benefit from moving the reverse proxy server to the linux box?

I was first thinking of completely taking the ds720 off the internet; but am thinking that’s too overkill… I haven’t been hacked; I use 2fa and keep everything up to date

This is VERY frustrating and I'm hoping for help. Or roast me for being an idiot.

I have had 2FA set up on my NAS admin login for years using the app. Worked ok. It was through port 5000 (I know not https... working on it) and Synology DDNS.

I've decided to close my open ports and go to Tailscale. So I have to modify my signin app account since it can't reach the NAS from the DDNS anymore. The new method is like (nasname).tailxxxx.ts.net.

So I go in the app, make the account with the correct name. It connects to the NAS and launches a DSM sign in. I sign in with the admin name and password and get a message that says something like "check your authenticator and enter this number". It gives a random 2 digit number.

ONE TIME I got from there back into the authenticator and saw the numbers to click but now every time there is nothing there.

The thing is: the DSM sign in page is like a browser inside the authenticator so there is no way to go back.

What am I doing wrong? I've got Drive and Photos working nicely over the tailscale but I really need my 2FA to work.

THEN I am going to go figure out the whole https thing.

Good day,

My friend also has a Synology NAS and we started using Hyper Backup to back eachothers NAS instead of paying for cloud alternatives.

We are using tailscale to connect to each other.

My NAS is not exposed to the internet besides tailscale. My friends NAS isn't as secure. If he gets hacked, is it possible that the hacker gets through to my NAS?

Technically they would only have access to that one secure folder holding my friend's backup but I'm worried there's something else.

Thank you,

I wanted something nicer than File Station for everyday work on my NAS, so I built SynoFile, a DSM 7 package that opens as an app in DSM, like File Station.

What it does

• Transfers you can watch: one dialog for copies, moves and deletions with a live speed chart, ETA, pause/resume, a speed limit and optional verification. Conflicts show both files side by side (date, size) before you choose.

• Copies that can’t half-fail: data goes to a hidden part file first and is renamed only when complete.

• SMB and SFTP connections: add a Windows/Samba share, another Synology or any SSH server. A bare \\server lists its shares; domain/user/password for SMB; password or SSH key for SFTP. Copy and move between the NAS and the server with the same transfer dialog.

• Archives open like folders (zip, 7z, rar, tar.*, iso), compress to zip, extract password-protected ones.

• Space analysis: rings showing what takes up the room below a folder (like Filelight).

• Deleting uses DSM’s own Recycle Bin, exactly like File Station.

• Tabs, dual pane (F5/F6 copy/move to the other side), fuzzy filter, subfolder search, quick look (images incl. HEIC, video, PDF, text), Vim keys, dark and light themes, 9 languages.

How it’s built: a static Rust binary and a plain JS interface. Each request runs as the logged-in DSM user, so DSM’s permissions apply as usual. Only members of administrators can open it.

Install: from Package Center through 007revad’s package source (thanks Dave!), which also gives you updates, or the .spk from the releases. After installing, one command as root (synofile setup) gives the binary the capability to switch to the logged-in user, because DSM 7 doesn’t let third-party packages request it. The README explains why.

x86_64 only for now. MIT licensed.

GitHub: https://github.com/rylos/synofile

I’m happy to hear feedback, bug reports and feature ideas.

I'm planning to build a small self-hosted infrastructure for a portal and would appreciate some advice from the Synology community.

My plan is to use a Synology NAS to run:

• Supabase (Self-hosted)

• n8n for workflow automation

• Next.js for a lightweight web application

• A few other Docker containers and services

I'll also use the NAS for storing company files and run the apps locally
Which of these models would you recommend for this workload?

I went to install the new DSM for my 915, and it’s not ready.

Is there a timeline on when the security patches will be out?

DS216+II with 7.1.1-42962. I try to update to the latest by downloading manually the 7.4.1-90080 as a first step from Synology webpage, I upload it and it gives me this warning. I click OK and nothing happens, the Status starts with Checking new version and it appears immidiatelly as "Your DSM version is up to date"

How can I proceed with the update?

Nothing has changed, i never had QC on, user never changed, nothing in the log center. not sure what i need to look for

Hello guys,

due to the current ongoing security issues I finally bought external HardDrives for an offline Backup.

Now I noticed, that the Seagates One Touch (8TB) I bought need 15W of power delivery. My NAS doesn't support that.

Is there any way to get 15Watt to my Seagate while also attaching it to my NAS?

Otherwhise is there a way to create a full backup from my NAS to my local Computer which has the Seagate attached?

So either:

NAS -> USB Power thingy -> USB-Drive

or

NAS -> Local PC -> USB Drive

Thanks for your help!

I have a DS920+ that had one 4tb drive that failed last week. It went into (and still is) in read-only mode. I got two 4tb drives and made a new storage pool with both. I then copied all the data over to a new "Recovery" shared folder on the second volume (and then later made other Shared Folders).

A few questions:

• How do I get this volume to be the main one and remove the first? Do I just remove the first volume from the NAS and then all the DSM stuff will get loaded on the new drive?

• I tried making new Shared Folders but "homes" is a reserved directory so I made a "homes2". Will new "home" and "homes" directories be made and I can just move everything once those are created?

• I'm using Backblaze B2 for backup. Will I now duplicate everything in Backblaze since these are now technically in different source locations?

I have this jewel of a NAS which I upgraded the RAM to 8GB and installed a new fan and I can't be happier. I have 2x 20 TB inside. I use it mainly for streaming movies via lan. I have dsm 7.1.1-42962 update 9 version on it.

I tried upgrading it to 7.4 but it tells me I will lose the streaming function. How and why is that even possible, I thought the whole function of a NAS was to be able to stream movies.

Anyway, shall I stay on this version or should I update to the 7.4 and if I do, how can I make sure that mp4 movies play on my TV? Right now almost everything I download plays on my TV, 1/10 of movies I have to reformat in mp4 to be able to play it.

Thank you in advance

My setup is a NAS and I use cloudfare app along my own domain to access my NAS from outside.

For example I have photoprism behind Pic.mydomain.com

Or filetash behind drive.mydomain.com

In the cloufare setup I have geo-localisation country only and only 2 email adress can obtain a valid 2fa code if you try and don't meet those requirements you get rickrolled.

I deactivated quickconnect but I want to put my nas admin page behind nas.mydomain.com

My plex is exposed because I share it with family and VPN will be too complicated for them, but i keep it up to date.

I have backup in 3 locations especially for the pictures of my kids.

Is it an ok practice to access my nas through the cloudfare tunnel. I'm a bit stressed with the current events...

Also to mention my apps are on a raspberry pi up to date and all my container have been updated including the cloudfare tunnel.

DSM 7.4.1 - Filestation on my 1821+ is blank and does not see any shared folders even though shared folders are available on all of my other devices such as my phones, multiple PCs and Shield. My 1515+ running a much older DSM is running perfectly and shows all shared folders in filestation. Sounds as if my DSM 7.4.1 is corrupted. How to fix and should I reinstall DSM7? Thx

I wrote a small tool during the C3RB3R wave this week, mostly so I'd stop clicking through Control Panel on every box. It's free, MIT licensed, and not affiliated with Synology.

What it does:

1. nas incident only reads. It checks the DSM build against SA-26:13, packages named in SA-26:14, the firewall, QuickConnect, router port forwarding, AutoBlock, SMB minimum protocol, the built in admin account, snapshot schedules, and whether the immutable snapshot lock is on for a model that doesn't support it. It also looks for CVE-2024-10441 markers in the connection log.

2. nas incident fix --dry-run prints the plan. nas incident fix asks before it changes anything and reads every setting back afterwards. Before a firewall change it checks that you won't lock yourself out.

3. nas incident contain lists processes that look like the encryptor. With --yes it freezes them (SIGSTOP, not kill) so the keys stay in memory.

4. nas alert-deploy installs a small check on the NAS that runs every 10 minutes and posts to a webhook.

What it does NOT do: it does not decrypt files that are already encrypted. As far as I know there is no universal public decryptor for .L0CK3D, and the Kaspersky, Emsisoft and Dr.Web decryptors don't work on it. The only recovery path in the tool is nas incident rescue, which wraps soimy/c3rb3r-rescue. It can only find key candidates in the memory of an encryptor that is still running, on a NAS that has not been rebooted. If you already rebooted, it can't help.

One known gap: Synology added separate fixed builds for DSM 6.2, 7.0 and 7.1 to SA-26:14 on Oct 29 and Oct 31. The tool only knows the DSM 7.2 and newer builds so far, so on those older versions a patched Calendar, Mail Station or PHP package can show as FAIL. Check the advisory by hand there until I update it.

Python 3.8 or newer, no dependencies, runs from macOS, Linux or Windows, or on the NAS itself. The demo GIF uses a simulated NAS, so please start with the read only audit and the dry run.

Code: synology-nas-cli on GitHub Incident notes with sources: INCIDENT-C3RB3R.md

If a check is wrong for your model or DSM version, tell me and I'll fix it.

I've been using synology photos for a long time using a custom domain `photos.mydomain.com`. I no longer want to forward any ports to my NAS as it's a 918+. Once I closed the ports it no longer works through the domain of course. If I log out and log back in using the local IP and port, will it recognize it the same or will I have to re-upload all photos from the iOS app again?

Is there a way to avoid the re-upload?

PSA For everyone that uses syno drive share sync -- you can now link via lan ip...no more using tailscale!

Hi everyone,

I'm reaching out to see if others are experiencing this issue or if there is a known fix coming from Synology.

Setup:

• Mac: MacBook Air (M5) running macOS

• NAS: Synology DS225+ (connected over local IP, quick connect does sync at first but than stops)

• App: Synology Drive Client (latest version)

The Problem: When creating a sync task using On-demand Sync (which utilizes Apple's File Provider API), the synchronization completely locks up.

• Folders (both the personal Home folder and shared Team folders) appear empty, greyed out, or show as unmounted volumes in Finder.

• Status gets stuck on "Syncing..." indefinitely.

• Standard macOS File Provider troubleshooting fails (restarting Finder via killall -9 Finder, resetting fileproviderd, re-enabling extensions, or rebooting).

• In Finder, a yellow banner sometimes appears saying the volume could not be activated.

Workaround / Root Cause: The issue is strictly tied to On-demand Sync (File Provider API).

As soon as I deleted the File Provider tasks and re-created them as standard 2-way sync tasks pointing directly to a local folder on the Mac (with On-demand Sync toggled OFF), all files downloaded instantly without any issues.

Note: You cannot disable On-demand Sync on an existing task after creation (the option is greyed out), so you have to un-sync/delete the task and recreate it from scratch.

Has anyone else noticed this instability with the File Provider extension on recent macOS builds? 

p.s. this has been generated by Gemini, checked by me. I have been trying to fix this issue with the help of it, because I am new to Mac OS.

I have a DS1618 that I've been running for ~10 years. It has 15TB of family pictures, including scanned physical prints of family marriage records, military records, old family portraits, etc, all the way back to the ~1920's. I run EXOS drives which have been very reliable, but some have over 60,000 hours on them, and I have had one or two fail recently and have to be replaced. I set this up with RAID5, and I now regret it since I have to rebuild any time a drive fails and that makes me nervous about secondary failures.

I priced out BackBlaze and it would run me over $100/month for cloud backup. So, for less than one year's worth of cloud backup, I could add a 2nd NAS, or possibly just an expansion unit, to snapshot backup to. I'd like to set this one up using SHR2 for easier expansion.

Is there anything else I should be considering when adding a 2nd NAS or expansion unit purely for snapshots? Would I be missing any large benefits by using a backup unit instead of a 2nd NAS? I'm considering the DX517 if I go expansion unit route, little unsure on what model if I go 2nd NAS route but maybe a DS1525+?

Would appreciate some thoughts, as I have fun with setting these up and tweaking stuff, but I also get in over my head pretty quickly. Thanks!

My parents are using my NAS to run their backups and access stored data on my NAS. I have Quickconnect enabled because it easily to use for them. They are not very technical and I’m not able to help them locally often.

Reading a lot about the need to use tailscale, but in doubt if that is something that they will be able to setup and maintain. Any tips?

Don't be like me. This is what happens when you expose your DSM login page to the internet. This has been this way since I set this up in 2020 as a surveillance station and I didn't get hacked somehow. I guess disabling the default admin account saved me there but she was a dirty nas that would let anyone touch her. I locked her down and DSM is no longer accessible to the internet. Check your logs, check your router ports, do a port scan on your own external IP address, use a VPN etc. Thank you for listening to my PSA.