TrueNAS SCALE Server Build
Custom-built TrueNAS server
Project Overview
Complete hardware build and infrastructure setup for my TrueNAS server. Built from the ground up. Overcame initial hardware challenges (defective motherboard RMA) to create a solid foundation for media automation, photo storage, and home automation backup infrastructure. The server runs 40+ Docker containers and three TrueNAS apps, providing a comprehensive self-hosted ecosystem.
Hardware Specifications
Build Challenge
First motherboard was DOA (wouldn't POST). RMA'd, replaced, then completed installation without further issues.
Remote Access
Tailscale (Primary)
Zero-trust VPN with subnet routing enabled for entire network access.
Cloudflare Tunnel
Backup access method with host network mode.
Plex Direct Access
Port forwarded on router for direct connections, eliminating relay lag during streaming.
TrueNAS Apps
- Cloudflared: Cloudflare Tunnel daemon for secure public access to select services
- Miniflux: Self-hosted RSS reader, consumed by NetNewsWire on iOS
- Tailscale: Zero-trust mesh VPN for remote access and subnet routing
Docker Services
Movies & TV Show Automation
- Bazarr: Subtitle automation for movies and TV shows
- Kometa: Automated metadata and artwork updates for media libraries
- Maintainerr: Automated library cleanup: removes movies unwatched 35+ days, TV episodes with no plays 28+ days
- Plex Media Server: 4K transcoding, port forwarded for direct streaming
- Prowlarr: Unified indexer manager, auto-syncs to Sonarr/Radarr, multiple private tracker integrations
- qBittorrent: Download client, seeding optimized for private trackers
- Radarr: Movie automation with Trakt list monitoring, hardlinks enabled for efficient storage
- Seerr: User request management for media libraries
- Sonarr: TV show automation with Trakt list monitoring, hardlinks enabled for efficient storage
- Tautulli: Plex monitoring and analytics, tracks watch history and server performance
- Unpackerr: Automatic extraction of compressed downloads (RAR, ZIP, 7z)
- Wizarr: Self-hosted user management and access control for media servers
- yt-dlp: Download and convert videos from YouTube and other platforms
Audiobook Automation
- Audiobookshelf: Audiobook and podcast library management with progress tracking, consumed by Prologue on iOS
- ReadMeABook:Audiobook Library Manager/Request Manager (Seerr for Audiobooks)
- Shelfmark: Unified web interface for searching and aggregating books and audiobook
Security & Monitoring
- Diun: Docker image update notifications
- Dozzle: Real-time Docker log viewer
- Frigate NVR: Camera NVR with hardware-accelerated object detection
- Mosquitto: MQTT broker for IoT device communication
- Netdata: Real-time system performance monitoring
- node-exporter: System metrics (CPU, RAM, disk, network)
- Prometheus: Metrics collection and storage
- Uptime Kuma: Service monitoring for all containers and apps
Productivity & Content
- Homepage: Custom dashboard providing unified interface for all services
- Immich: Photo management
- Joplin: Note-taking with PostgreSQL backend, mobile sync
- Linkding: Bookmark manager
- Nextcloud: File sync and storage with PostgreSQL backend, 32GB Redis cache
Projects & Utilities
- Honeygain: Peer-to-peer network for sharing internet bandwidth
- nbnstack: nginx container serving this website
Data Protection & Backup Strategy
Off-Site
Backblaze B2 provides geographic redundancy. Media downloads excluded as they can be re-acquired if needed.
UPS Power Protection & Monitoring
Monitoring & Integration
- Automated Alerts: Notifications for power events, low battery, and overload conditions
- Home Assistant: Real-time UPS status visualization in custom dashboards
- Metrics Tracked: Battery level, load percentage, input/output voltage, runtime estimates
- Prometheus: UPS metrics collection via nut-exporter for performance monitoring and alerting
Power Continuity
Provides clean, regulated power to server during outages and voltage fluctuations. Pure sine wave output ensures compatibility with server PSU and prevents hardware stress.
Network Security
- Authentication: All exposed services password-protected or using Plex SSO
- Cloudflare Tunnel: Encrypted tunnel without port forwarding (except Plex)
- Tailscale: Zero-trust mesh VPN for all administrative remote access
- TrueNAS Firewall: Default restrictive configuration with minimal open ports