My unRAID Usage Report

Published at  at 03:16 PM

unRAID is a home NAS system, and it’s also my first time using a NAS. Because some friends are using it, I didn’t consider other NAS systems. It has been running stably for many years with an excellent user experience, so I’m recording this to share with others.

Usage of File Sharing Function

Plug-ins

Community Applications

Equivalent to the App Store

Recycle Bin

Recycle Bin, Wastebasket (only works if file sharing protocol is used)

Unassigned Devices [plus]

Unassigned devices outside the array, such as USB flash drives, removable drives, etc.

Compose Manager

Adds docker-compose and a management panel to unRAID. Not being able to customize the icon is annoying.

USB Manager

Allows easy management of USB devices, which can be assigned directly to VMs. Light use is easier than hardware passthrough.

User Scripts

Timed tasks. I don’t use crontab for two reasons:

  1. all configurations, scripts are within Flash backup. (crontab can also be restored as a file crontab ~/.crontab)
  2. Simple dashboard and log management.

Some complex cron doesn’t work, so weigh it yourself.

NerdTools

Package manager. Currently vim, zsh, and nodejs are installed.

Dynamix File Manager

unRAID 7 has integrated it.

A file manager embedded directly in the unraid backend admin page, which is somewhat useful, but not much.

RClone

Web disk synchronization tool, mainly used to compensate for the missing offsite disaster recovery feature, refer to another article

WireGuard (unRAID built-in)

For details, check out: How to connect to home intranet from outside?

Virtual Machines

OpenWrt

This step requires purchasing a network card hardware, then passing it through to the virtual machine, refer to Spoto’s tutorial on Bilibili.com.

  1. DDNS: Used to automatically resolve domain names to the correct public IP, because the public IP of telecom broadband changes every now and then, and fixed public IP is too expensive.
  2. OpenClash + MosDNS: Special demand on the Chinese network.
  3. Other plugins I haven’t had the energy, or the need to look into for a while, such as adblocking and traffic control.

CentOS for OpenVPN

For details, check out this article

Since the docker version is no longer maintained, it’s loaded into a virtual machine.

Windows 10

I am already an Apple ecosystem user, so I need a virtual machine to run some Windows-exclusive software.

I have switched to using Parallels Desktop to simulate the Windows environment.

I built a PC for gaming, hahaha.

Ubuntu

Install shairport-sync + snapcast to implement a multi-room (whole house) sound system. The Airplay2 solution has been implemented, but I also want to support Windows and Android, and am still in the exploration stage.

Reasons for choosing Ubuntu:

  1. After installing the Docker version of shairport-sync, Apple devices cannot find it.
  2. The snapcast documentation only explains how to set shairport-sync as an audio source through stdout; I don’t know how to do this via a Docker container, perhaps through the network?
  3. Snapcast can be directly installed on Ubuntu, whereas CentOS requires manual compilation; if the second point can be resolved, the Docker version would also be quite convenient.

Docker

MySql & Redis

Infrastructure.

Nginx

has been moved to a virtual machine to facilitate automatic certificate renewal.

Used for

  1. Allocate domain names instead of [IP]:[Port]
  2. Unified handling of https
    1. The certificate is applied for using Certbot, and the official website states that port 80 needs to be open. I was misled for a long time and used self-signed certificates for a long time. For details, please refer to Applying SSL Certificate with CertBot without Port 80.
    2. Automatic renewal: mainly use the SDK to add/modify a TXT record in DNS resolution. Aliyun’s API documentation is available here. It took about two or three hours to develop, and the code is available here.
      1. I recently saw the docker version of auto-requesting certificates, haven’t used it yet: https://github.com/certd/certd

Tailscale

For more information, see this article.

MtPhotos

Photo management service, functionality close to Apple Photos, you can also try Immich

Far surpasses all domestic cloud services (1. Privacy and censorship issues; 2. Exif information will be modified), NextCloud, PhotoPrisma (user-unfriendly operation and no multi-user support), Pho.

Gitea

Lightweight git service, Gitlab is too heavy.

Bitwarden

Cross-platform password management tool that covers mainstream browsers, Android, iOS, Mac, and supports command line and Alfred. It can also store bank cards, address forms, etc.

Chrome and iCloud are good but not cross-platform.

2022-08-15: Today I read a post. Everyone take a look: chrome passwords leaked out; just realized using chrome to save passwords is like running naked

1Password is the ceiling of password management services but passwords are very private data; you need to weigh it yourself.

EnPass can be privately deployed but its functionality is too rudimentary.

My principles for using passwords are:

  1. Enable two-factor authentication on all platforms that support it; it’s much safer than just using a password.

  2. Do not keep two-factor authentication codes with your passwords; don’t put all your eggs in one basket.

  3. Two-factor authentication QR codes (keys) and recovery codes are very important; keep at least one or more copies in the most secure place possible. (I lost an Alibaba Cloud key before and still haven’t been able to recover the account even after appealing for help; had to create a new one.)

Tips: Authenticator on a smartwatch works well as you don’t have to find your phone. Microsoft’s Authenticator supports iCloud sync Salesforce’s Authenticator supports viewing on Apple Watch. After trying them all out, I highly recommend 2FAS Auth which has recently gone open source – only thing missing now is Apple Watch support being released soon!

Home Assistant

A smart home control center that can connect different brands of smart home devices together. For example, you can use Siri to control Xiaomi’s lights. My evaluation is that it has high playability and strong customization, but it’s not worth the effort. It’s very troublesome, better to just use Mi Home directly..

NextCloud

It can be understood as a privately deployed AWS S3 or Google Drive.

It has a lot of features and a rich ecosystem, not just cloud storage.

There are quite a few minor issues, so I uninstalled it due to my perfectionism.

Seafile

Recommended in the comments section and I’ve used it.

Syncthing

Used to synchronize software configurations, with a focus on Alfred and iTerm2 configurations. Previously used NextCloud for synchronization, but NextCloud often had problems so I switched.

The difference between synchronization and mounting is that mounting refers to remote files, which disappear when the connection is disconnected. Synchronization, on the other hand, means keeping your local and remote files consistent, with no significant impact if the connection is disconnected.

The differences between Syncthing, Seafile, and rclone are: Syncthing runs in real-time in the background and is decentralized. Seafile also supports real-time synchronization in the background but requires a server, similar to NextCloud or OneDrive. Rclone is command-based and by default performs one-way synchronization (its bidirectional sync feature is still in the beta stage), similar to rsync. It’s primarily used for tasks like cloud storage syncing and backup, often used together with scheduled tasks.

I have gave up Syncthing for the following reasons:

  1. Syncthing’s ignore syntax is too non-mainstream, and it seems that its ignored file do not sync between devices.
  2. After restored from Time Machine, Syncthing actually requires manual resetting of ID before it can be used again; truly troublesome.

AList

Web version of the file browser, which has many features, such as support for cloud storage, synchronization, and downloading.

It can compensate for the types of cloud storage not supported by rclone through its built-in webdav, such as Quark Cloud.

It can solve some niche software issues like duplicacy not supporting WebDAV through its own s3 solution, like this post.

It can replace Nginx(autoindex) to host a Public folder for sharing with friends or allowing friends to upload directly.

I have tried its permission management before; the download links had no authentication… I don’t quite trust it.

WebDAV

If you have installed Nextcloud or Alist, then you don’t need to install this.

Similar to SMB, WebDAV uses the HTTP protocol. Some third-party clients support WebDAV synchronization (mostly Chrome extensions), so I installed it for that purpose.

aliyundrive-webdav

If you have installed Alist, then you don’t need to install this.

This is an implementation of webDAV for Aliyun Drive mainly used for backup purposes. There are some caching issues but they are not significant.

OpenLDAP + phpldapadmin

It’s not worth the hassle. It’s less work to just Bitwarden/1Password to generate random passwords.

Unified authentication. With so many applications installed, changing passwords is too cumbersome.

Tried FreeIPA, but encountered an error that couldn’t be resolved, so I gave up.

Currently integrated with OpenVPN and Gitea.

Transmission

A downloader that hasn’t been used for a long time.

xware

Remote download tool for Thunder. Installed but not used.

Aria2

By the end of 2022, I switched to using Aria2-Pro + AriaNg / Aria2 Explorer as a full protocol downloader.

MeTuBe

Download videos from various websites in one click, similar to Downie. I don’t need it at all, lol.

Jellyfin

Home theater service. My little integrated graphics are struggling a bit. It’s a bit redundant for ordinary people, not as convenient as screen casting.

QingLong

It is also a scheduled task, mainly used to automatically perform tasks on JD.com.

After using it for a while, hundreds of Jingdong beans were credited to my account every day, which was quite great. (2023.04: Can’t get much profit anymore)

Although it may not be enough to be convicted of damaging computer systems, being banned is still very likely, so I stopped using it.

Wiznote / Joplin / AppFlowy

In the end, I decided to use IDE + Git instead of these note-taking software. I think no matter how well note-taking software is done, it will always be inferior to IDE. IDE can have unlimited possibilities with plugins and can conform to your writing habits.

If you need multi-device synchronization, consider Obsidian, which does not require registration and can be used directly by opening the iCloud folder. Moreover, you can still use an IDE to edit on your computer. This is inconvenient with Joplin because its directory structure is not human-readable.

FreshRSS + RSSHub + WeWeRSS

I’m relying more and more on RSS, it’s efficient to get all the information in one place and not be held hostage by recommendation algorithms. One downside is that there’s too much information, and it’s impossible to read it all, haha, even just reading the titles is a big waste of time.

RSSHub converts all kinds of websites that don’t support RSS into RSS, such as Bilibili, Zhihu, Weibo, Xiaohongshu, Twitter, Telegram…

WeWeRSS specializes in converting WeChat to RSS.

The role of FreshRSS is to synchronize the whole platform and fine management, not necessary, but recommended. Under normal circumstances RSS client can directly add subscriptions, you can also login to FreshRSS. This service has a competitor called TTRSS, which also supports self-host.

For the client, use Reeder (paid) or NetNewsWire (open source free) for Mac / iOS, and Feedme for Android. It’s great to have cross-platform synchronization.

DeepL Free API DeepLX

Used for Bob and Immersive Translate.

Duplicacy / Duplicati / Kopia

See this post

Next Step Plan

Here is the feature I want to implement next. If you have any recommended or updated feature, feel free to share.

Look into ZFS (RAID-Z)

unRAID 6.12 already supports it. unRAID 7 already supports using RAID-Z instead of traditional arrays. The downside is that you can’t reduce the number of disks gracefully.

Updates at December 2022

IPv6 was enabled on OpenWrt

Refer to this article, the reason is that the living environment is using china mobile broadband, and there is currently no public IP.

Advantages:

  1. No need for port forwarding, can directly resolve to Nginx.
  2. Can use ports 443 and 80 (not sure, but I encountered problems after only a few weeks).

Disadvantages:

  1. IPv6 is not widely used; if a company’s network does not enable IPv6, then it’s helpless.
  2. By default all devices are exposed to the extranet, which undoubtedly increases the security risk.
  3. Some telecommunications companies (such as Anhui Mobile) have unstable resolution of IPv6.
  4. Debugging is complex with many pitfalls; I experienced two less obvious pitfalls:
    1. Remember to enable MSS clamping in the firewall on OpenWrt.
    2. The old optical modem may cause stuttering; you can directly request the telecommunications company to replace it with a new one at home

Accessing Intranet Services via IPv6

Final form: DDNS (IPv6) directly points to Nginx, which then forwards to the intranet IPv4 service (Docker container). I now have a public IPv4 address again, with dual-stack resolution.

You can take a look at this post and the links mentioned within.

Share on:
Share this post via WhatsApp Share this post on Facebook Tweet this post Share this post via Telegram Share this post on Pinterest Share this post via email