Post B4yimSPWgarD5PNDii by etchedpixels@mastodon.social
 (DIR) More posts by etchedpixels@mastodon.social
 (DIR) Post #B4yimS89jAxkDXFLe4 by davidgerard@circumstances.run
       0 likes, 0 repeats
       
       wot's the current hotness in NAS brands? Main job: serving files over SMB. Prime criteria: not being a pain in my arse. Synology are out cos they tried proprietising their disks. And I have a Synology and it's a piece of shit and I hate it.Do any of them not impenetrably lock the bootloader?Ugreen features ✨AI✨, which is uh
       
 (DIR) Post #B4yimSPWgarD5PNDii by etchedpixels@mastodon.social
       0 likes, 0 repeats
       
       @davidgerard A low energy mini PC and some SATA hot swap bays is I think at this point about the only way to avoid it being utter shite.
       
 (DIR) Post #B4yimScdtpLhk5VhAG by davidgerard@circumstances.run
       0 likes, 0 repeats
       
       @etchedpixels that did occur to me. what works and has four 2.5" SATA bays?
       
 (DIR) Post #B4yimSpP8NYcNfTt3Y by david_chisnall@infosec.exchange
       0 likes, 1 repeats
       
       @davidgerard @etchedpixels I built my NAS 16 years ago with a Chenbro case that has four removable SATA bays. Installed FreeBSD, ZFS on root, runs samba, does Time Machine backups and so on (also shares music and ripped DVDs over NFS, because read-only NFS is easier from a few things).  I replaced the 2 TB disks with 4 TB ones after five or six years. About six years ago I replaced the motherboard with a newer one (Pentium Silver, the most cursed one, with MPX and SGX support, apparently the dumping ground for technologies Intel abandoned) with 64 GiB of RAM. The board officially doesn’t support that much, but mini-itx.com sold it as a package with a guarantee. A picked up a very cheap second-hand SSD a while ago and added it as L2ARC, so most reads are now satisfied from the SSD not the spinning rust.It’s needed an average of less than five minutes of maintenance per month, not counting hardware updates. About a year ago I started renting a cheap OVH dedicated server with a bunch of disks. It exposes an iSCSI disk over WireGuard. The NAS mounts this and runs a ZFS pool over full-disk encryption. I use zrepl to back up the datasets I care about to that. It does decaying snapshots (hourly for an hour, daily for a week, and so on) as well. It also does the same for the zvol on the remote side. If the remote machine is compromised, it can’t see the unencrypted data. If the local machine starts writing nonsense to the off-site backups, I can roll back the disk with the remote pool in it to a previous state.