# NAS Systems

Live-verified 2026-04-18. Three Synology NAS units.

## Atlantis — DS1823xs+ (primary)

| | |
|---|---|
| Model | Synology DS1823xs+ (8-bay) |
| CPU | AMD Ryzen Embedded V1780B (4 core / 8 thread) |
| RAM | 32 GB ECC |
| DSM | 7.3.2-86009 |
| LAN IP | 192.168.0.200 |
| Tailscale IP | 100.83.230.112 |
| Uplink | 10GbE via Synology E10M20-T1 (combo card, slot 1) |
| Role | Primary NAS: arr-suite, Immich (with Calypso), Paperless archive mount, AnythingLLM, WireGuard, Matrix-Ubuntu VM host |
| Containers | 59 (as of 2026-04-18) |

Storage layout is documented separately in [atlantis-storage.md](atlantis-storage.md):
- Volume 1 (RAID 6, 8× 16TB IronWolf Pro, 84 TB usable, Btrfs encrypted)
- Volume 2 (RAID 1, 2× Crucial P310 1 TB NVMe via adapter, 885 GB)
- Volume 3 (RAID 1, 2× Synology SNV5420 400 GB NVMe built-in, 348 GB) — SABnzbd working dir

SSH: `ssh atlantis` (port 60000, user `vish`).

## Calypso — DS723+ (secondary)

| | |
|---|---|
| Model | Synology DS723+ (2-bay) |
| CPU | AMD Ryzen Embedded R1600 (2 core / 4 thread) |
| RAM | 32 GB (8 GB stock + 24 GB aftermarket) |
| DSM | 7.3.2-86009 |
| LAN IP | 192.168.0.250 |
| Tailscale IP | 100.103.48.78 |
| Uplink | 10GbE via Synology E10G22-T1-Mini (Intel X550-AT) |
| Role | Secondary NAS: Headscale, Authentik SSO, Gitea, Immich DB, Paperless-NGX, Reactive Resume, SearXNG partner node, primary AdGuard |
| Containers | 61 (as of 2026-04-18) |

Storage:
- Volume 1: 2× 12 TB IronWolf Pro in RAID 1 (~11 TB usable, Btrfs encrypted)
- NVMe cache: 2× 500 GB Crucial P3 Plus in RAID 1

SSH: `ssh calypso` (port 62000, user `Vish`).

## Setillo — DS223j (remote)

| | |
|---|---|
| Model | Synology DS223j (2-bay) |
| Platform | Realtek RTD1619B (aarch64) |
| RAM | 1 GB (non-upgradable) |
| DSM | 7.3.2-86009 |
| Tailscale IP | 100.125.0.20 |
| Uplink | 1 GbE |
| Role | Off-site backup target, secondary AdGuard DNS, Prometheus node + SNMP exporters, dozzle-agent |
| Containers | 4 |

Storage:
- Volume 1: 2× 10 TB WD Gold in RAID 1 (~8.8 TB usable, Btrfs)

Quirks (see [hosts/setillo.md](../hosts/setillo.md) for details):
- `vish` has passwordless sudo but **sudoers blocks shell execution** (`!/bin/sh, !/bin/bash, !/bin/ash, !/usr/bin/su`). Use `sudo tee` / `sudo /opt/bin/opkg` style invocations.
- Entware opkg installed at `/volume1/@entware`, bind-mounted to `/opt` via systemd `opt.mount`.

SSH: `ssh setillo` (user `vish`); root access via `ssh setillo-root` (when needed for rare operations).

## DSM version alignment

All three NAS are on DSM 7.3.2-86009. Updates are coordinated manually; no auto-upgrade.

## Backup targets

| From → To | Method | Cadence |
|---|---|---|
| Atlantis → Calypso | Hyper Backup (media, photos, docs) | Weekly / daily |
| Atlantis/Calypso docker → Setillo | Syncthing | Real-time |
| Atlantis media, photos → Backblaze B2 | Hyper Backup S3 | Weekly |
| Calypso docker → Backblaze B2 | Hyper Backup S3 | Daily |

See [infrastructure/backup-strategy.md](../infrastructure/backup-strategy.md) for full 3-2-1 details.