Synology Notes

Installation

  1. Installation and user manuals are downloaded from the synology website.

  2. Getting Started guides:

Permissions and ACLs

  1. The NAS works best when keeping acls as intact as possible and keeping as few users in the administrator as possible (to protect home directories). Try only to change permissions through the control panel or file station. If you must make changes on the cli, limit to specific files or folders.

  2. The Synology Acl Tool (/usr/syno/bin/synoacltool) is useful for managing permissions.

    • synoacltool -copy is used to copy acls from another file or folder.
    • synoacltool -enforce-inherit is very useful to maintain or restore original acls.
    • Combine with find & xarg commands.

SSH

  1. SSH must be enabled from the Terminal & SNMP section of the Synology control panel.

  2. Only users in the administrator group and log in through ssh (without tampering with config files that may get overwritten by updates).

  3. SSH keys can be used but ownership and permissions on the .ssh directory of the user's home directory must be manually updated.

  4. Password authentication can be turned off but the sshd server must be stopped and restarted from the control panel for settings to take effect.

Rclone

  1. To install the rclone binary, download the appropriate zip file from rclone site, unzip and copy the binary to /bin. The man pages etc can be discarded.

    curl -O https://downloads.rclone.org/rclone-current-linux-amd64.zip
    7z x rclone-current-linux-amd64.zip
    cd rclone-*-linux-amd64
    chown root:root rclone
    chmod 755 rclone
    cp rclone /bin/

  2. Alternatively use the rclone/rclone docker image from Docker Hub.

Wireguard VPN

  1. Install the docker image masipcat/wireguard-go from Docker Hub.

  2. To enable the tun driver, place the following script at /usr/local/etc/rc.d/tun.sh

    #!/bin/sh -e
    # Installed by Keith Weddell for Wireguard VPN

    insmod /lib/modules/tun.ko

  3. Configure as for usual wireguard setup.

TO DO

  1. Hyper Backup to cloud (Synology C2).

  2. Host websites

  3. DNS Server

Previous Next