Network Attached Storage (NAS) Setup Guide

A Network Attached Storage (NAS) device is a dedicated computer optimized for storing and sharing files across your home network. Unlike external hard drives that plug into a single computer, a NAS is always on, always accessible to all devices on your network, and typically runs specialized software for backups, media streaming, and file sharing.

For households with large media libraries, multiple computers, or serious backup requirements, a NAS is one of the most valuable additions to a home network.

NAS vs. Cloud Storage

A NAS is most compelling for: - Large media libraries (4K video, raw photos, music collections) - Households with multiple computers needing shared backup - Users with privacy concerns about cloud storage - Long-term economics (after 2-3 years, NAS is cheaper than cloud subscriptions)

Cloud storage is better for: - Disaster recovery (off-site by definition) - Occasional small file access - Users who want zero maintenance - Truly remote backup (3-2-1 backup strategy)

Choosing NAS Hardware

Synology vs. QNAP

The two dominant consumer/prosumer NAS vendors:

Synology is the more user-friendly option: - DiskStation Manager (DSM) — intuitive web interface - Package Center with hundreds of apps - Excellent Active Backup suite (free backup for PCs, Macs, VMs, cloud-to-NAS) - Strong community and documentation - Conservative hardware specs but very polished software - Popular models: DS223j (2-bay, entry-level), DS723+ (2-bay, performance), DS923+ (4-bay)

QNAP offers more hardware flexibility: - More expansion options (PCIe slots, 10GbE options, M.2 SSD cache) - QTS operating system with powerful features for advanced users - More complex interface, steeper learning curve - Good for virtualization and advanced networking use cases - Popular models: TS-233 (2-bay, budget), TS-464 (4-bay, performance), TS-873AeU (8-bay, rack)

For most home users: Synology. The DSM software quality and ease of setup justify the choice.

Drive Bays

A 2-bay NAS with two large drives in RAID 1 is the sweet spot for most households.

Drive Selection

NAS-optimized drives are designed for 24/7 operation, vibration tolerance, and lower power consumption:

• Seagate IronWolf — Consumer NAS line; excellent price-to-performance
• Western Digital Red Plus — CMR (Conventional Magnetic Recording) — important for reliability in RAID
• Western Digital Red Pro — Higher workload rating for busier NAS
• Seagate Exos / WD Gold — Enterprise drives; overkill for home, excellent for always-on

Avoid desktop drives (WD Blue, Seagate Barracuda) in NAS applications — they are not designed for continuous operation and vibration, and may trigger error recovery timeouts that cause RAID controllers to drop the drive.

Recommended starting point: 2x 4TB Seagate IronWolf in a 2-bay Synology NAS. This gives ~4TB usable with RAID 1 mirroring.

Understanding RAID Levels

RAID (Redundant Array of Independent Disks) is not a backup — it is protection against drive failure. A RAID array continues operating when one (or more) drives fail, giving you time to replace the failed drive and rebuild.

RAID 1 (Mirroring) — Best for 2-Bay NAS

Both drives contain identical data. If one drive fails, the other has all your data intact.

Drive 1: [File A] [File B] [File C]
Drive 2: [File A] [File B] [File C]  ← Mirror

Capacity: 50% of total (2x 4TB = 4TB usable)
Fault tolerance: 1 drive can fail
Read speed: Can read from both drives simultaneously (faster)
Write speed: Must write to both drives (limited by slowest)

Best for: 2-bay NAS, maximum protection per dollar, simplicity

RAID 5 — Best for 4-Bay NAS

Distributes data and parity information across all drives. Can tolerate one drive failure.

4x 4TB drives:
Capacity: 75% of total (12TB usable from 16TB raw)
Fault tolerance: 1 drive failure
Read/Write: Faster than RAID 1 for sequential reads
Rebuild time: Long (can take 12-48 hours for large drives)

Risk: RAID 5 rebuild stress on remaining drives can trigger a second failure (URE — Unrecoverable Read Error). For drives over 4TB, RAID 6 is generally recommended.

RAID 6 — Best for 4+ Bay with Large Drives

Like RAID 5 but with two parity blocks, allowing two simultaneous drive failures.

4x 8TB drives:
Capacity: 50% (16TB usable from 32TB raw)
Fault tolerance: 2 drives can fail simultaneously

Best for: Valuable data, large drives, always-on deployments

Synology Hybrid RAID (SHR)

Synology's proprietary RAID variant is excellent for mixed-size drives. If you have drives of different sizes (e.g., 2TB + 4TB + 4TB), SHR maximizes usable space while providing redundancy. Standard RAID levels waste capacity with mismatched drives.

What RAID Is Not

RAID does not protect against: - Accidental file deletion - Ransomware (encrypts files on all drives simultaneously) - Fire, flood, or theft (both drives in same device) - Bit rot / silent data corruption (use ZFS for this) - Software bugs that corrupt the filesystem

RAID replaces the need to immediately replace a failed drive. You still need backups.

Initial Setup

Physical Setup

1. Install drives per manufacturer instructions (tool-less on most modern NAS)
2. Connect to your router via ethernet (never use Wi-Fi for NAS if avoidable)
3. Power on and access the web interface: typically http://diskstation.local or find the IP via router DHCP

Synology DSM Initial Configuration

1. Install DSM via web installer
2. Create administrator account — use a strong unique password
3. Set up storage pool and volume with chosen RAID level
4. Enable automatic DSM updates (Security → Update & Restore)
5. Create user accounts for each household member
6. Disable admin account after creating personal account with admin rights

Network Configuration

# Assign a static IP to your NAS via DHCP reservation
# In your router's DHCP settings, find the NAS MAC address
# and reserve a specific IP (e.g., 192.168.1.50)

# The NAS can also be set to use a static IP in DSM:
# Control Panel → Network → Network Interface → Edit

A static IP is important so that your computers' backup configurations always point to the same address.

Backup Integration

Time Machine (macOS)

1. In DSM, go to Control Panel → File Services → AFP/SMB
2. Create a shared folder specifically for Time Machine backups
3. Enable Time Machine support on that folder
4. On your Mac, go to System Settings → General → Time Machine → Add Backup Disk
5. Select your NAS share

Time Machine stores hourly, daily, and weekly backups. Set a quota (Synology supports per-share quotas) so Time Machine doesn't consume your entire NAS.

File History (Windows)

1. Create a network share on the NAS accessible to your Windows account
2. Go to Control Panel → System and Security → File History
3. Click "Select drive" and choose "Add network location"
4. Enter \\NAS-IP\share-name

Synology Active Backup for Business (Free)

Synology's Active Backup suite provides backup for: - Windows PCs and Macs (agent-based) - VMware and Hyper-V virtual machines - Microsoft 365 and Google Workspace data - Other NAS and file servers

It is completely free for Synology NAS owners and provides features usually requiring expensive enterprise backup software.

Media Streaming

Plex Media Server

Plex is the most popular home media server software:

1. Install Plex Media Server package from Synology Package Center
2. Add your media library locations (movies, TV shows, music, photos)
3. Plex scrapes metadata, downloads artwork, and creates a Netflix-like interface
4. Stream to Plex apps on smart TVs, tablets, phones, Apple TV, Roku, etc.

Direct Play vs. Transcoding: - If your client device can play the file's codec natively, Plex streams it directly (no processing) - If the codec is unsupported, Plex transcodes in real-time (CPU-intensive) - Most modern NAS CPUs handle 1-2 simultaneous 1080p transcodes; 4K transcoding requires a powerful NAS or GPU acceleration

Plex Pass ($5/month or $120 lifetime) adds offline sync, enhanced parental controls, and hardware transcoding support.

Jellyfin (Free and Open Source)

Jellyfin is a community-driven, completely free alternative to Plex. No subscription, no tracking, fully self-hosted. The interface is similar to Plex. Available in Synology Package Center.

Emby

Between Plex and Jellyfin in terms of open-source commitment. Free tier available; Emby Premiere ($4.99/month) unlocks mobile apps and additional features.

DLNA

For basic streaming to compatible TVs and devices without dedicated software, DLNA (Digital Living Network Alliance) is built into most NAS systems. Enable it in DSM under Control Panel → Media Server. Less feature-rich than Plex but zero configuration.

Remote Access

Accessing your NAS from outside your home network requires careful security consideration.

Option 1: VPN (Most Secure)

Run a VPN server on your router (WireGuard or OpenVPN). When away from home, connect your phone or laptop to your home VPN, then access the NAS as if you were on your home network.

Remote device → WireGuard VPN → Home router → NAS

Advantages: NAS is never directly exposed to the internet; all traffic is encrypted. Requirements: A router that supports VPN server functionality (or a separate device like a Raspberry Pi running WireGuard).

WireGuard configuration (minimal example):

# /etc/wireguard/wg0.conf on router
[Interface]
PrivateKey = <server-private-key>
Address = 10.8.0.1/24
ListenPort = 51820

[Peer]  # Your phone
PublicKey = <phone-public-key>
AllowedIPs = 10.8.0.2/32

Option 2: Synology QuickConnect (Convenient, Cloud-Relayed)

Synology's free QuickConnect service creates a relay through Synology's servers:

1. Register at account.synology.com
2. Enable QuickConnect in DSM Control Panel
3. Access from anywhere via https://quickconnect.to/your-id

Trade-off: Traffic may route through Synology's servers (relay vs. direct connection). Data is encrypted in transit, but you are relying on Synology's infrastructure. For sensitive data, prefer the VPN approach.

Option 3: DDNS + Port Forwarding (Avoid Unless Necessary)

Dynamic DNS provides a hostname for your dynamic home IP. Combined with port forwarding on your router, this exposes the NAS directly to the internet.

Security risks: - DSM web interface exposed to internet-wide scanning and brute-force attacks - Requires keeping DSM updated at all times - HTTPS certificate required (Let's Encrypt integration in DSM simplifies this)

If you use this method: - Enable 2FA on all accounts - Enable auto-block (Control Panel → Security → Account) to block IPs after failed logins - Change default ports (don't use 5000/5001) - Consider exposing only specific apps (Plex, Nextcloud) rather than the full DSM interface

Tailscale (Best Balance of Convenience and Security)

Tailscale installs as a package on Synology NAS and creates a mesh VPN without port forwarding. Your NAS gets a Tailscale IP accessible from any device with Tailscale installed:

# After installing Tailscale package on Synology:
# Access NAS from anywhere at:
# https://100.x.x.x:5001 (Tailscale IP)
# or if Tailscale MagicDNS is enabled:
# https://diskstation.tailnet-name.ts.net:5001

No port forwarding, no cloud relay, encrypted mesh VPN — excellent choice for home NAS remote access.

Maintenance and Monitoring

Drive Health Monitoring

Enable SMART monitoring in DSM:

• Storage Manager → HDD/SSD — Shows SMART status, temperature, bad sector counts
• Enable email/push notifications for drive errors
• Run extended SMART tests quarterly (takes several hours, but can be done while NAS is idle)

Scrub / Data Integrity

Enable scheduled data scrubbing (Storage Manager → Storage Pool → Action → Scrub): - Reads all data and verifies checksums (BTRFS filesystem) or checks parity (RAID) - Detects and corrects silent data corruption - Run monthly for important data

UPS (Uninterruptible Power Supply)

Power outages during a write operation can corrupt the filesystem. Connect your NAS to a UPS. Synology supports USB UPS communication — when power fails, the UPS notifies the NAS to complete current operations and shut down gracefully before battery runs out.

Monitoring Dashboard

DSM includes a comprehensive Resource Monitor showing CPU, RAM, disk throughput, and network usage. Third-party tools like Portainer (for Docker containers on NAS) and Uptime Kuma (availability monitoring) add more visibility.

3-2-1 Backup Strategy

A NAS is a storage device, not a backup system. Follow the 3-2-1 rule:

• 3 copies of important data
• 2 different storage types
• 1 offsite (cloud or physical)

Copy 1: Primary working copy (laptop)
Copy 2: NAS (local backup, RAID for drive failure protection)
Copy 3: Cloud backup (Backblaze B2, Wasabi, or Glacier)

Synology's Hyper Backup app supports cloud backup directly to Backblaze B2, Amazon S3, Google Drive, and more — automatic, encrypted, versioned offsite backup from your NAS.

Setting up a complete home NAS system — hardware selection, RAID configuration, Time Machine, remote access, and offsite backup — takes an afternoon. The result is a resilient, private, fast storage platform that scales with your needs for years.