Nas

01

15 min read

Self-hosted family SFTP: exposing a NAS without port forwarding using Pangolin + Newt + SFTPGo

Replacing an Internet-exposed SFTP with a Pangolin + Newt + SFTPGo stack: no port open on the NAS, outbound WireGuard tunnel, raw TCP SFTP served from a €3/month VPS. Including the traps: invisible provider firewall, SFTPGo defender useless behind NAT, broken PROXY protocol.

02

13 min read

Kernel panic on a Debian NAS: recovering a truncated libc without rebooting into the void

A Debian 13 NAS that won't boot: immediate kernel panic on the first userspace exec, with libc.so.6 turned into "ISO-8859 text" instead of ELF. Diagnosis through debugfs, recovery from a live USB with the apt↔libc chicken-and-egg trap, and the APT guardrails to put in place so it never happens again.

03

5 min read

Secure remote access to your NAS with Tailscale

Setting up Tailscale as a WireGuard mesh VPN to access your NAS and entire local network from anywhere, without opening ports.

04

5 min read

NAS monitoring: watching disks, services and logs at a glance

Deploying Uptime Kuma, Scrutiny, Dozzle and Homepage on a Debian NAS to monitor disk health, service availability and Docker logs.

05

5 min read

Managing photos with self-hosted Immich

Deploying Immich on a Debian NAS as a self-hosted Google Photos alternative, with facial recognition, AI search and external libraries.

06

5 min read

Building a complete media center with Jellyfin and the *arr stack

Deploying Jellyfin, Sonarr, Radarr, Prowlarr, Bazarr and Jellyseerr on a Debian NAS for a fully self-hosted media center.