All Activity

This stream auto-updates     

  1. Yesterday
  2. tuina tuina joined the community
  3. Dani dlr Dani dlr joined the community
  4. Suphachai.P Suphachai.P joined the community
  5. Last week
  6. Alex.
    @Paul G you can restrict access. especially you can prohibit anonymous connection to the drive.
  7. jdrch
    @Mr Fethersmith Yw! @Andy+ @Mr Fethersmith My apologies for the broad brushed statement. I guess I just don't have a use case for any of those right now. I'm glad they work for you
  8. Andy+ started following Deploy and forget? Resilio distributed
  9. Andy+
    Seafile has a completely different concept, it is not peer-to-peer based, but server-oriented. It works exactly like ownCloud or nextCloud and is simply addressed externally via an http or https address. I use ownCloud parallel to Resilio because I am often on restrictive company networks, from which it is usually not possible to contact other Resilio peers. The http/https connection has great advantages. At this point, Syncthing has expanded the features as a P2P software alternative so that a connection is also possible via http/https or ports 80/443. That is why I also work with Syncthing in parallel and sometimes have links with Resilio. I have not used ownCloud or nextCloud for some time.
  10. Mr Fethersmith
    Thank you @jdrch that was a very fine explainer! That comment against seafile was unecessary though. It is a completely different thing and works very well. And having the possibility for a webdav access to your folders if you want to sync with apps on tablets, phones, etc. is a killer feature. Which I am missing here.
  11. Anton Clark Anton Clark changed their profile photo
  12. Paul G
    Thanks Alex. In terms of saving to a NAS do I need to encrypt the folders to keep their content unshared as it seems that the resilio sync folder on the NAS can not be set up in my secured home folder and areopenly available to any anonymous connection to the drive.
  13. nunu
    that's a shame :/
  14. Giuventino26
    Hi everybody, i have a strange probleme, on my s10+ sync works well, it has files sync between Phone, pc and NAS. But on my wife S10+ it worked only one Day, now everytime i launch Résilio Sync App it shutdown saying "sync close automatically" Could you help me please ?
  15. Giuventino26 Giuventino26 joined the community
  16. flish88 flish88 changed their profile photo
  17. jdrch
    Yw! Seafile is worse than Resilio Sync in every way IMO, but use what works best for you. Encrypted data is impossible to interpret without decryption. This means that all encrypted files must be decrypted before being read. With those 2 facts in mind, here's how full-disk encryption on computers works: The entire disk is encrypted, including the operating system (OS) At some point in the boot process, the bootloader (a small operating system that loads the requested OS into RAM and then hands off operation of the machine to it) realizes the disk the OS is on is encrypted, and requests the encryption key so it can start the OS The encryption key is provided in one of multiple ways depending on your config. We'll come back to this point later Now, this is the crucial part: the encryption key does not decrypt the entire disk at once. Rather, it decrypts data that is read from the disk in real-time and in memory so that the CPU can perform operations on it. All the data on the disk is still encrypted Similarly, all data the OS writes to disk is encrypted in memory before it's written to the disk. This includes data synced to Resilio folders on that disk. In other words, everything on the disk is always encrypted, regardless of machine state. Now, back to point 3. The key can be stored: internally on the computer itself, typically in a hardware component that we'll call an enclave for the sake of convenience externally. In this case, the key is provided by the user in the form of a password, biometrics, smart card, USB key, FIDO key, etc. Internal Pros: Convenient: machine can be restarted and booted up without the user being present. This is good for unattended updates and patching Cons: Because the encryption key is stored onboard, eventually at some point someone will discover an unpatchable vulnerability that can be used to extract it. You can avoid this by upgrading to a newer machine (security isn't inexpensive.) Enclave support in non-Windows OSes is hit or miss Windows and macOS have the best implementations of this. External Pros: Since the key is stored elsewhere, it's can be more difficult to crack than internal methods, especially if you use a FIDO 2FA token, for example Cons: Key has to be manually provided, which means OS can't automatically complete reboot and remote reboots are (mostly) impossible. OS can't effectively (kernel) patch itself There are ways around this but they're not inexpensive. Most OSes are on approximately equal footing here. It's gonna be easier on Windows and macOS but still possible otherwise. Now to something I forgot to talk about previously: the actual backup part of your strategy. You'll need to make backups of the synced files on the target devices, preferably to a separate disk. While that disk may be encrypted, it doesn't necessarily have to be, because Veeam Agent Free (Windows) and Restic (everything else) both allow encrypted backups. Another way Another way around this is to use Restic or Duplicati on one of (you only need one because they're all synced) your local machines + OpenVPN or Wireguard from the remote backup targets. Have the backup targets all connect to your LAN automatically via OpenVPN or Wireguard, then use Restic (which encrypts backups by default) or Duplicati (same) to push backups to the remote targets. Since the backups are encrypted with a locally stored key, you don't have to encrypt the targets, and your backups are both secure and unreadable by anyone without the password. This also eliminates the need for an extra disk at the target. You'll need to setup dynamic DNS on your local LAN so your remote targets always connect to the same URL. Set up unattended-upgrades on the remote Pis so they can keep themselves secure and updated. Much of this method is outside the scope of this forum as it doesn't involve Resilio Sync; I'd ask at r/OpenVPN, r/homelab, r/datahoarder, &/or r/raspberry_pi on Reddit if you have further questions. ______________________________________________________ I know this is a lot to absorb at once, so don't be disappointed or overwhelmed if you don't understand it right away. None of this is easy. If you want to use Raspberry Pis, the Another way method might be the easiest, since Pis weren't designed with device security in mind and I don't think they support disk encryption very well. If you want to the targets themselves to be disk-encrypted then you need recent x86-64 PCs.
  18. Paul G
    Agree
  19. Mr Fethersmith
    Thank you @jdrch that was a very fine and helpful solution. I know it is not a backup, I would do this from my little server setup. (I already was doing this with my seafile setup with which I want to replace this). Okay good point about just using full disk encryption, gotta finally look into LUKS I guess. But even then, the disk is only en-or decrypted after mounting/unmounting, right? So a running system has decrypted its disk already and the files are thus accesible. It is not encrypt-on-write, is it? (Maybe that does not even exist, sorry for my newbieness)
  20. Alex.
    @Paul G You can just share folder from windows to NAS. https://help.resilio.com/hc/en-us/articles/204754939-Comprehensive-guide-to-syncing-Desktop-Desktop- It happens automatically. https://help.resilio.com/hc/en-us/articles/204754209-What-if-several-people-make-changes-to-the-same-file-
  21. jdrch started following Deploy and forget? Resilio distributed
  22. jdrch
    The biggest problem with your idea is that sync != backup. While you can certainly use Resilio Sync, you'll need something else at the backup locations too. Not necessary. All you need is whole disk (or volume) encryption on the target device. This will render the entire device unreadable without your credentials. It's essential that you do this, because your friends and family are legally responsible for any data physically located in their homes. This means that if the data is readable, you open them to legal risks. No computing system is 100% deploy and forget. Also, I'm not so sure about Pis and encrypted disk/volume support. A better option might be lightly used enterprise PCs such as any of these that fit these specs. Then you could install either Linux with disk/volume encryption + unattended upgrades or Windows 10 with Bitlocker (you'll need a PC with a TPM for this) and automatic updates enabled. Throw in TeamViewer and you can manage them remotely as needed.
  23. Paul G started following How to configure / set up Resilio as a backup from windows to a NAS
  24. Paul G
    Hi, I have a readyNAS running Resilio with identity (nas) and have installed it as a service on my Windows machine with identity (desktop). I'm trying to get my head around the naming and sharing conventions used. I essentially want to backup all files in a selection of given folders on my desktop to the NAS so that in the event of a disk failure on the windows machine the files will be on the NAS. When I add files they should ideally be synced to the NAS either on a schedule or immediately. I want to ensure that all files are completely backed up to the NAS at all times. It's unclear to me from the documentation how I can do that. Do I need to share the same identity across the both installations? Seems weird having a windows installation with identity (nas). Also in this scenario I assume that if I edit or delete a file on the readyNAS from some other connection that those changes will propagate to my windows desktop. Does that happen automatically and if not how does the subsequent conflict get handled if I was to also edit the file in windows before the NAS synced up to it?
  25. Paul G Paul G joined the community
  26. umar umar changed their profile photo
  27. Mr Fethersmith
    Hello there, I started using Resilio for my personal files. In order to make my files better availbale by distributing the load and making the system more fail safe, I wanted to set up "a few" (maybe just 2 or 3) raspberry pis each with a HDD at friends and family. And since I would place very personal files at peoples homes over which I don't have much control, I wondered if there is a way of installing a linux distro (or freebsd) that would encrypt files on write (even non-encrypted resilio folders). Because of course my sensitive files are in encrypted resilio folders, but other folders still contain files that COULD be sensitive in some context. And if my mom would carelessly through away a hdd, I would be ensured that nothing leaks. So my question is: Does someone have experience setting up resilio with a encrypt-on-write linux distro so that one can "deploy and forget" resilio instances?
  28. Swed_ty Swed_ty changed their profile photo
  29. Earlier
  30. Daria
    @sven9191 Can you please specify Sync version on NAS (check via App Center)? Also, please attach screenshots of the pages showing the errors.
  31. sven9191
    Hello together, after a clean resilio installation on a qnap, i got an error if i clicked on the resilio button to administrating it Chrome reports: ERR_SSL_PROTOCOL_ERROR Firefox reports: SSL_ERROR_RX_RECORD_TOO_LONG for troubleshooting i´ve updated the firmware version and tried it with http instead of https ... help :((
  32. Miyo
    I have noticed that unpausing doesn't always work correctly and there is an issue when pausing a specific folder plus pausing the global setting. If I unpause a folder when the global setting is different as when pausing it, it will not continue. With other words, try to play with diffent combinations of global pause and local pause to get it going again.
  33. Alex.
    @Steven Pemberton unset global pause
  34. darrendavid started following Migrating a Sync folder from one computer to another
  35. darrendavid
    Hi all- I've got an external hard drive with several folders configured in Sync attached to Laptop A. I'd like Laptop B to become the master Sync client for the folders on the hard drive - is there an easy way to transfer ownership of these folders that are configured in Sync on Laptop A to Laptop B, or do I have to add them again as new folders in sync on Laptop B and share them out again to existing folders on remote devices? Darren
  36. PUrMar
    No, I had to google what is Docker Image. Not running it. Just Resilio Sync on Asustor backing a laptop folder to it.
  37. Andy+ started following Sync on Asustor file location and is Sync v2.6.4 on Google play and other platforms yet ?
  38. Andy+
    The newest version of Resilio as Android APP is v2.6.3 https://play.google.com/store/apps/details?id=com.resilio.sync&hl=de Regarding QNAP is the same as for all, from time to time check, if updates available https://help.resilio.com/hc/en-us/articles/206178964-QNAP
  39. Andy+
    Are you running a Docker image?
  40. Andy+
    Same on my Smartphones. Mainly Sync runs, but cant shutdown for restarting, this freeze the App. I must restart the whole Smartphone. This is no good condition, so Syncthing runs for all instead.
  41. jabv
    Alright, well there hasn't been any help from developers on fixing this issue, but I've found a temporary remedy. The app no longer freezes on Android so I don't have to force stop the app or restart anymore, but it will still lose connection after a certain amount of time and have to Exit the app and restart to get it to sync again. What I did was Force Stop the app (Phone Settings -> Apps -> Sync), then Clear Cache and Clear Data (Phone Settings -> Apps -> Sync -> Storage). This clears all your settings so it's like starting from a fresh install of the app. Before you link the device, use your file explorer on android to rename your shared folders (e.g. "Folder" to "Folder.BAK"). Then link the device and connect the folders, but keep Selective Sync turned on. Wait for the folders to stop Indexing. Then Exit Sync (either from the notification bar or in the app press "Exit"), and using your file explorer, cut & paste your files from the old Folder.BAK to the new shared Folder (if you have a lot of files, you need to cut & paste a few files at a time or Sync will crash when trying to index). Then start Sync again and wait for it to finish Indexing with the files added. When it's finished Indexing, you can turn off Selective Sync. One last thing (this is for Android 9), go to Phone Settings -> Apps, click the three dots in the upper right and choose Special Access -> Optimize Battery Usage, then select All Apps. Scroll to Sync and switch it off. The app doesn't crash anymore, but I still have to Exit and Startup again to get it to connect to my other devices after some time. If Resilio doesn't fix this, Syncthing as recommended earlier is a good alternative, though it's really confusing to use at first and there's no Selective Sync. You can use the ignore file, but that's not very practical nor convenient for most people's selective sync needs.
  42. geocline started following NAS (WD MyCloud EX2 Ultra) not sleeping
  43. geocline
    Hey all. I have read multiple files on here to try and resolve this, but my WS MyCloud EX2 Ultra will NOT sleep with Resilio Sync installed. Firmware/version: WS MyCloud EX2: 2.31.204 Sync: 2.6.4.1344 I have gone into 'Power User Preferences' and changed config_refresh_interval, config_save_interval and folder_rescan_interval all to 18000. I have then rebooted. No change. Has this been solved? Any suggestions? Thanks!
  1. Load more activity