⚡🎬

Your NAS Starter Guide

From an empty Synology to movies & shows that just appear — but more importantly, to actually understanding your machine. Tick things off as you go; your progress saves automatically.

The stuff I wish someone had told me before I did it the hard way · Synology + lifetime Plex edition

Progress

0 / 0

Day 0 — learn these first

makes everything easier

A few basics that make the rest run a lot smoother. Most people click around Synology's menus forever and stay a bit stuck. Learn these three things and you can talk to your NAS in plain English and it does what you ask — which is how I run my whole setup, almost never touching a button.

Meet the Terminal The plain text window where you type commands (on a Mac it's literally called “Terminal”; on Windows use “Terminal” / PowerShell). It looks intimidating and is secretly your best friend — it's just a way to tell a computer exactly what to do. Open it once, type whoami, hit enter. That's it, you've used the terminal. 🎉 Understand SSH — “remote-controlling” your NAS Your NAS is a little computer with no screen. SSH is how you log into it from your laptop's terminal and type commands as if you were sitting at it. Enable SSH in DSM (Control Panel → Terminal & SNMP), then from your laptop: ssh yourname@your-nas-ip. Suddenly you're inside the NAS. That's the whole magic — don't overthink it. Install Claude Code the game-changer An AI that lives in your terminal, can SSH into your NAS, and actually does the work. You don't memorize Docker commands — you say “set up Radarr and connect it to qBittorrent” and it does it, explaining as it goes. This is the single biggest unlock. Install it, point it at your NAS, and let it teach you while it works. Do one real thing with Claude, not for you Ask it something small and let it walk you through — e.g. “SSH into my Synology and show me how much disk space is free.” The goal isn't the answer; it's watching how it connects, runs a command, and explains. After 2–3 of these, the terminal stops being scary forever.

🧠

Why start here instead of just installing stuff?

Because a NAS you can only operate through menus is a NAS you'll be scared to touch. A NAS you can talk to is one you'll actually tinker with, fix, and enjoy. Everything in Day 1 below? You can literally just ask Claude to do it. This section is what makes you the person who owns the machine, not the other way around.

Day 1 — movies & TV (the core win)

the fun part

Get movies & TV auto-downloading into Plex. This is 90% of what a media NAS is for. It's a group of six small apps (the “*arr suite”) that hand off to each other like a relay team. Tip: don't install these by hand — ask Claude Code (Day 0) to set them up and wire them together.

📡

The #1 thing that trips people up: your ISP

If you’re on Ziggo (like me), it blocks most torrent sites at the DNS level. The fix that works: use meta-aggregator indexers (Knaben, TorrentsCSV) + a couple of resilient ones (LimeTorrents, YTS via FlareSolverr) instead of the classic sites. If you’re not on Ziggo, the normal indexers may just work — try them first. Ping me either way, I’ve got the working list.

🎚️

Quality: aim for “direct play,” not “biggest file”

Set Radarr to prefer 1080p between ~35 and ~100 MB per minute. Below that = blurry junk; way above that = huge remuxes a Synology CPU can’t transcode, so playback stutters. This one setting saves you a world of pain. Tell me your exact Synology model and I’ll tell you what it can handle.

Lock the door 🔒

please don't skip

Quick honest warning, because nobody tells you this part. A NAS is a computer that's on 24/7 with all your stuff on it. Set up carelessly, it's a box the entire internet can try to break into — and people run bots that scan for exactly this all day. None of the below is hard; it's mostly flipping a few switches. Do it once and forget it.

🏠

The one mental model that keeps you safe

Think of your NAS as a house. By default the doors are locked and only devices on your home wifi have a key — that's safe. Danger comes from one thing: propping the front door open to the whole street so you can get in from outside. On a router that's called “port forwarding.” The rule is simple: don't open ports to reach your NAS. Use a safe tunnel instead (see the last item). If you never port-forward, you've avoided 90% of how home NASes get hacked.

Don't port-forward your NAS the big one On your router, leave the NAS's ports closed to the internet. If a guide ever tells you to “forward port 5000/5001/etc so you can access DSM from anywhere,” don't — that's the open front door. Plex is the exception: it handles its own secure remote access, so you never open ports for it either. Kill the default admin account + strong password Bots try to log in as “admin” with common passwords first. Make your own named account, give it a long unique password (use a password manager — Bitwarden/1Password), then disable the built-in “admin” and “guest” accounts in DSM. This alone stops most automated attacks. Turn on 2-factor authentication DSM → your account → enable 2FA (a code from your phone). Even if someone somehow guesses your password, they still can't get in. 2 minutes, huge payoff. Switch on the firewall + auto-block Control Panel → Security. Enable the Firewall, turn on Auto Block (locks out an IP after a few failed logins) and DoS Protection. It's a few checkboxes and it slams the door on brute-force bots. Let DSM auto-update Turn on automatic security updates for DSM. Most break-ins use known holes that were already patched — staying current closes them for free while you sleep. Keep the download apps on your home network only Radarr, Sonarr, qBittorrent etc. all have web pages with little to no security by default. That's fine as long as they're only reachable on your home wifi. Never port-forward them, and set a password on qBittorrent. Ask Claude to double-check none are exposed. Need it from outside the house? Use a tunnel, not an open port When you do want to reach DSM or an app while you're away, the safe way is Tailscale (in the “Later” section) — it builds a private encrypted tunnel between your devices, no ports opened, nothing exposed to strangers. That's the “safe tunnel” from the house analogy.

Day 2 — the stuff I actually run

easy wins

Low effort, high reward, and these are the extras I genuinely use myself. Each is basically “point an app at a folder, get a nice web reader + phone app.” (Again — just ask Claude to set them up.)

Deploy Audiobookshelf Your own audiobook (and podcast) server with a slick phone app. Drop files in a folder, done. I use this daily. Deploy Calibre-web A clean web library + reader for your ebooks. Send-to-Kindle built in.

Later — the rabbit holes

when comfy

Genuinely cool, but each is a project on its own. Do them after the media stack has been rock-solid for a couple weeks. No rush, no pressure — and full honesty on which of these I've actually done myself.

A real backup honesty: I haven't either Full disclosure — I've been running mine on a single disk with no backup and I keep meaning to fix it. So take this as “let's both finally do this” not me lecturing you. The point: one drive dies and it's all gone. Movies re-download; your settings and anything personal don't. When you're ready, ask Claude to set up Hyper Backup → cloud or a second drive. We can do it the same week. Photos — figure it out together You mentioned wanting photos eventually. Honest answer: I haven't set this up myself, so I can't hand you a proven recipe. Synology has a built-in “Photos” app, and there's a fancier self-hosted one called Immich. When you get there, this is a fun one to explore with Claude — and tell me what you learn. Tailscale — reach your NAS from anywhere, safely You don’t need this on day 1 (Plex already streams from outside your house). But when you want to open the NAS admin remotely without exposing it to the internet, this is the answer. 10-min install. Home Assistant — your smart home hub Fantastic, and it runs on the NAS. But it’s a hobby, not set-and-forget. Start it as its own thing once the media stuff is boring and stable. A personal AI agent on the NAS The endgame: I have one (“Hermes”) that I talk to on Telegram — it manages the whole stack, downloads what I ask, sends me a morning digest. This is the ceiling. Come find me when you’re curious. 😄

🎉 That’s the whole thing — a proper media server, and you actually understand how it works. Welcome to the club. 🍻