 So I'm here for more systems and we're going to dive into syncing on FreeNAS and how to set it up manually. I just did a video on syncing I'll be leaving a link to that where I dive deeper into it I just wanted to focus today on how to set up manually inside of FreeNAS. If you'd like to learn more about me or my company however to laurancesystems.com if you like to hire a sharp project there's a hire us button up at the top if you want to support this channel in other ways There's some affiliate links down below to get you deals and discounts on products and services We talk about on this channel So I'm not going to dive into all the intricacies of syncing I'll leave a link to the video where I do but yes It's private encrypted authenticated fully open source and free and an awesome plug-in to use on FreeNAS But the official plug-in which is I have running right here, and I loaded it as of today This is the latest version of FreeNAS 11.3 U2. It is April of 2020 so this is all current and this is I just loaded this today And the way it sets up is not with an s HTTP 192 1683 8 colon 8384 slash same thing the official plug-in sets up with the reverse proxy why am I bringing it up? Well the challenge with doing it that way is if you go into any of the settings you notice the Listening port is local hosts and people go. Oh, I can just change that well It gets a little bit more complicated in that because it's running through engine X any changes you have to make here or do Make here you'll have to also go into the plug-in and modify engine X and obviously this may be Problematic because you want to run it in a secure mode. You want to run it with Authenticated users, but each one of these are passing through engine X and to me This is a little bit more complicated of a way, but maybe you'll find my other way I'm going to show you complicated What we're going to do is set this up and then use SSH port forwarding to gain access to it But we're going to do it 100% manually and I'll show you how to manually set up a jail inside of FreeNAS This is going to give you the flexibility and once you've mainly gone in there You do have the option at that point and you can bind it to that external IP address So there's two ways to do it whether you leave it bound to that IP address or not, and I'll show you This is the one that I'm actually doing for my business docs graphics server backups And yes, it updates my studio videos And from here it is completely bound to the external IP address that was assigned through DHCP So I went to the system settings And you can see I have it bound to 0 0 0 8 3 4 each bound all there And I have an authenticated user of time and I set a password on this one I'm going to show you how to do it this way or you can use to use the forwarding which I mentioned in my previous video So I'm going to show you both ways, but how to set it up manually. It's actually not that hard to do So we'll go ahead and close all these and I'll just show you how to map the data in here as I know that's a question people run into and have problems with So I'll stop this plugin. I don't really need it I just loaded it to show you that it works the default setup works But please note any changes you make within there will cause issues in terms of You have to modify the engine X system as well because of the reverse proxy. So how do you build a manual jail? So let's go ahead and just build a manual jail. Let's click add This will we'll call sink thing YouTube Jail type clone jail release just choose the latest I was going to go ahead and hit next I Want it to be DHCP It works to me better to set things up as DHCP and the reason why is because once it set up DHCP I'll go in make a DHCP as reservation for it. I have everything set up as DHCP with reservations in my PfSense from a standpoint of Manageability it makes it easy to list out all the IP addresses and if I had to change a bunch of them I don't have to log into a bunch of devices and change static addresses I modify all the tables and pfSense my pfSense is pretty much always up and running if it's not well I don't have internet. So it's usually a priority to keep it up and running. Therefore. That's my preference But yes someone who is going to ask about manual configuration for De that it is completely possible. Yes, you can do it. I'm just not going to dive into that for this topic all right, so the jail is up and running so we have an IP address of this and We can do a couple different things from here I say a couple different things because you can go into the shell here and do the commands I'm going to run. I just find it less convenient to do this. So I'm going to show you how to do the Shell from the command line and how to get into this So we're going to go ahead and exit out of it, but that if you don't have SSH or something you can completely do this in that little Window there where you just open up a shell. So here's the IP address of it and the GL name is sync thing YouTube So what we're going to do is go over here and we're going to make this bigger I'm gonna choose the bigger profiles. I sometimes I forget to do that I know it helps people when you are trying to watch what I'm doing but all these commands and everything will be in my Form so I'll leave a link just like it with the other videos where I walk through all the commands So you can copy and paste them yourself make your life easy So we're going to SSH into the free NAS box that we're running this on and then we're gonna go IO cage we're going up the console this way and It's syncing YouTube so I okay each console and And now that brings me and basically attaches me to that so I guess it's the same thing as opening up the shell there And then from here now we're gonna set up syncing manually and we're gonna set up the packages manually on here So what we're gonna do is do a package update Make sure we have the latest package update in here. So yes Now we're doing this inside of a GL not actually inside of the main Free NAS system. I've heard people ask about can you do this inside the free NAS system itself? That's a terrible idea. Don't do that. I think it may work There's probably someone who has some right up on it do it inside a GL There's jails for a reason this keeps them locked down and separate from the main operating system All right, all the packages are up to date. Let's install syncing It's gonna grab and download syncing and install that into the jail Now please note and we'll address this later Syncing was added as a user with 983. That's important And that's because when we set the permissions for the mount points We'll show you that I've already got a user created for user 983 because I already have other jails running a sync thing It does create the same user each time so you can do that and just create the permissions when we get to that part But that's where that information came from later that we'll use I was gonna paste in the commands because now what we want to do is we want to enable sync thing So it's sysrc sync thing underscore enable equals. Yes, like I said these commands will be in the forums And I want to be able to SSH into this for convenience and to do the wrapping part So now we're gonna go ahead and SSH D enable yes so that allows us to do SSH and What we're going to do is look at RC.conf and confirm those things are in there. So sync thing enable. Yes, SSD enable Yes, so you want to make sure both of those are Enabled that means they start up when the system starts up now comes a little bit of complicated part if you're not familiar with Vim or Vi It's not too hard to do but want it SSH SSHD config so we want to edit the SSHD config and Slash permit root Which is right here We're going to Change this to yes, because we want to allow root to log in You know we change it back later probably good for security reasons that you do But we do want root to log in for the setup of this and later on you can lock it back down because once this is all configured You may not need to go back into it and you can also set key login I'm not gonna dive too much into but you can look up how to strengthen SSH Usually not logging in as root is one of them also make sure you to choose like key authentication only that's important Now there is no password on root as in none at all But doesn't mean you can log in but you can't because you can't log in with a blank password So we're gonna change a password for root. All right now. We have a password set for root We're gonna exit And what we're gonna do now is instead of going and counseling and we're going to just restart the service Because that'll make sure everything starts up and that restarts this particular jail All right got the same IP address. So now we're gonna go into it and We can see that we have sync thing running and we have SSHD running awesome. Those are the two things we need That's pretty much it for getting that part set up now We can actually exit exit and go right into here And if you remember the IP address we can actually log right into it now and when we log into it we want to log into it with the These functions right here. So we're gonna SSH dash L for local to local port 8,000 Because I already have a three four running sync thing on my local computer This wraps the port eight three four binds it to because by default it binds the local host here eight three four And we're going to do root at the IP address to log into this system here. So, oh I've already used this before for other demos. So hold on You shouldn't get that error Yes They've been the password reset and away we go now I could of course from here to load my SSH keys and make automatic login, but you know, not a big deal there It's other options. I'm not gonna get too much into SSH management But you can find plain information on that but what we did was we know sync things running We have it set up on here and we went and we're gonna open up Firefox So I have another browser opened up I'll go ahead and say yes to an anonymous usage statistics and away we go I now have access to my device now from here We can go to the actions settings and if we don't want to keep doing this SSH thing we can change this to 000 Tom all right pretty simple and save It's gonna give you an error about the director of Christians will get to that in a second now We're still logged into local host, but now we can actually type in 8384 make sure you get the IP address so 192 1683.177 the IP address of that particular jail And now we're logged in now. The last thing is obviously I didn't do it with secure But let's go ahead and fix that real quick. I will go back over here to settings And we'll check the little box here the color scheme makes it hard to see that box But if we check the use this for that it's gonna restart again Accept and continue and now we're logged in using HTP as simple as that now I can directly get to this as needed now from here for some security standpoint Yeah, maybe you want to turn off you can even completely turn off SSH as you're not needing it anymore Or turn off root login, you know for extra security lock it down because now you don't need to log in and do the tunneling anymore You now have easy access now one other side note to this and let's go ahead and break this connection Is if we go back into the jail just SSH back into it user local Let's see sync thing is where the config file is and then from here You can actually take a look and go into the config.xml. Whoops By not them and you could have manually done all this as well in here So if you wanted to manually change things without doing some of the other steps, that's completely optional here you can just go to the GUI enabled and Set each of these here and manually set like I said each function actually you probably start with not putting a password in I'm gonna put the password in so it does the hashing and everything here. So and then Pretty straightforward. So there's a couple different ways to approach it But I just have it of doing it with the tunnel wrapping so I can make sure I'm following the UI instead of making a mistake Typing in the XML file, but the preference is yours now from here It's actually set up and running ABC says default folder stop because we need to set permissions and we don't even need the default folder I usually don't start with that one. Anyways, because it has some silly name that I don't care about So before we can add any folders, we're actually gonna have to stop this plug-in and Add some mount points for the data. So we had stop Then we're gonna go to mount points before we go there Let me just show you how the pools configured because I have this already set up with sync thing YouTube demo So here's a data set I created sync thing YouTube demo. Here's the user I created Sync thing when you add a user and when you add specifically user 983 you type in the username and I went and I can't do it twice because it's already here you Edit the id and group to be 983 So then I called the user sync thing you can call whatever you want But think things seems like a pretty obvious choice and then you give it user ID 983 Then when you go over to the data set here that I created So here is the sync thing YouTube Because it was a specific demo don't edit ACL edit permission so if you try to edit the Advanced permissions, it's just not needed for this type of shares You don't need to full ACL you can just edit basic because they're really simple permissions The only thing we're sharing in here unless you're doing something different than your use case will vary there But if you just want this to be a storage place for sync thing You can just set user sync thing group sync thing and this is just basically those users that I had set up And make sure the user has the read write access choose if you need any of the other access, but pretty simple So mount dozer sync thing YouTube. This is a data set I created. Let me go back over here to the jail itself Go here mount point and we're going to Add a mount point for this Now source mount point is the real free nas what data set do you want to do this? We're gonna say same thing YouTube you I could have sub data sets under I'm just using this as an example You could create 20 different folders under it if you wanted to or 20 different data sets under it comes down to How you like your use case? Where do you want to mount it at out of habit? I like mount so slash MNT and we'll give it the same name We'll call it sync to a little similar name So this is inside the jail now inside the jail. It's nested jails only see what's nested So they see this part here where they'll see just Mount and then sync to From outside you see it here. This is the inside of the jail and jails can't go they can only traverse so far They are basically nested within there is the best way to describe it But what does it say pretty straightforward? It's gonna create that folder and when we start the jail back up Let's go back over to jails Start and if we SSH back into it now There's that sync to him folder under mount so the jail because it's nested sees it there and It sees it as the owner of sync thing, which means we go into sync tube. I have permission to Touch files and remove files in there, which is important because now we're gonna go over here and log back in It's just refreshing a page. We're gonna add a folder Slash MNT sync tube Give it a folder name if I was to use this as a server I'd probably do some file revisioning and set all the configurations like I covered in the other video And we're good. It is now running at this address. It is running the latest version right here 1.40 And it works so I can add remote devices set up all the configuration It was able to if we go back in and look one more time There's that folder it creates the dot st folder for the revision So it had permission to do the right so no errors there and you're done now you can start the other process such I covered there for adding remote devices getting everything synchronized and Everything is now, you know Accessible support 2200 on this will be listening or 22,000. I'm sorry We'll be listening on here so we can set other devices and I guess for the hell that I'll set up one device on it So this is my window system. I had for the demo the other days I've already got documents and downloads in here already configured and let's go ahead and attach it to that particular Free Nass instance, so we'll go over here. We'll close. We have too many windows open And we're gonna get the device ID. So so we're gonna go here show ID device ID demo You can say dynamic, but we'll go ahead and specify the actual port that was running on Paste in the address here 192 1683 and 177 20 port 22,000 at a fault port We left everything in there. We want to share those folders with it and hit save And go back over to this Close and in a few seconds this should pop up and say hey this device would like to attach Actually while we're waiting and we'll remove this because I'm not gonna be using this one. So yes Yes, we're gonna add this device It's the win Der's pooter save Wait a few more minutes Well, sometimes about 20 seconds it kind of varies but there's like a pause after you accept it Then it starts again and sends out the signal to share what folders that we have shared with it And there they are. They popped up. So let's add them So there's a documents folder and we just have to change the path to mount Sync tube and we'll call it docs We'll leave it out everything else at default there I mean we could turn on the file versioning because secondly if I was gonna make this a server Maybe want 10 revision of the files. So hit save that one's created. We'll add this one same thing flash mount Sync tube and then we'll call this one download Maybe we want to keep some file versioning for that Maybe only five revisions of the downloads And in a few seconds here, it's going to synchronize and away we go. It'll be all set Actually while we're waiting for synchronize, we'll go ahead and be we're logged in till the jail here There's those file folders that were created And once it's done synchronizing, uh, they'll be populated with all the data. So Oops documents So waiting on synchronization. So as I sync it'll be all set and it's just like diving in what I do with all the data There we go. All the files just started Uh synchronizing There's all the files that just got copied over And that's it. It's ready to go actually now we can ls in here and all the same thing as I covered in the other video All the other details of anything I edit here get synchronized across But usually you're not doing it free nas is a great place to keep it as a repository for all your data It's usually where you have a lot of redundancy and drive setup now I can administer this Like I said, if I wanted to be a little more secure, I can go back and turn off ssh on it So it's more locked down and turn it on as needed basis But this is it. It's all configured and set up manually and fully featured without any reverse proxies or anything set up And we are using hgtps to administer this And once again, if you wanted to modify things or set this up later with another reverse proxy Like I had talked about with ha proxy and pf sense. So you're not dealing with a self science certificate That can be done here as well. But generally speaking once this is set up I don't spend a lot of time in syncing on my server Once you have it set up and done it just synchronizes all my files Like it has been for years and works very happily. So that's how to set it up in free nas It's a excellent tool that you's in there It makes really good use of and a good secure way to keep all of your files and personal synchronization between you and maybe even co-workers or any devices that you have to sync You may have noticed when I was talking about even for my own company It's easy ways you can load this on different servers and create a backup strategy with it So as servers generate certain files You can have those files and have syncing running locally on the computer and then synchronizing and then all that gets Consolidated with revisions and synchronized back across to their location. So it's pretty diverse tool I really recommend it and that's I set up in free nas. Thanks. Oh and everything will be in the forums As I said for all the commands I used and thank you for making it to the end of the video If you like this video, please give it a thumbs up If you'd like to see more content from the channel, hit the subscribe button and hit the bell icon If you like youtube to notify you when new videos come out If you'd like to hire us head over to laurancesystems.com fill out our contact page And let us know what we can help you with and what projects you'd like us to work together on If you want to carry on the discussion head over to forums.laurancesystems.com Where we can carry on the discussion about this video other videos or other tech topics in general even suggestions for new videos They're accepted right there on our forums, which are free Also, if you like to help the channel in other ways head over to our affiliate page We have a lot of great tech offers for you. And once again, thanks for watching and see you next time