TrueNAS: file server with ZFS and VPN

Deploying TrueNAS for File Storage with VPN Access

TrueNAS lets you set up a reliable file storage system on existing hardware without buying a specialized NAS. The system uses ZFS to ensure data integrity, snapshots, and replication. In a test environment on Proxmox, we created a VM with one disk for the OS and two in RAID1 for storage—configuration took minimal time.

Key requirements: ease of administration, a recycle bin for file recovery, and data mirroring. TrueNAS meets all points without additional hacks.

Advantages of ZFS in TrueNAS

ZFS is integrated out of the box and provides:

• Self-healing of corrupted data through checksum verification and recovery from mirrors.
• Snapshots at the pool or individual dataset level with automatic cleanup.
• Scalability: adding disks without reformatting.
• Built-in monitoring: CPU, RAM, disk I/O, and network traffic graphs in the web interface.

Disk and dataset management is handled through the web panel. Setting folder access permissions includes users, groups, and ACLs, though the interface takes some getting used to compared to proprietary NAS systems.

Snapshots and Replication

Snapshots are configured with schedules: frequency, retention, and replication to a remote pool. This provides a rollback point without external tools.

• Automatic tasks: daily/hourly snapshots with rotation.
• Replication: sending to another TrueNAS or compatible ZFS storage via SSH.
• Recycle bin: deleted files are available in snapshots until cleanup.

Failure notifications (disk, space, errors) can be set up for email, Slack, Telegram, or webhooks.

Setting Up Remote Access

For external access without opening ports or a public IP, VPN applications from the TrueNAS catalog are used.

ZeroTier

ZeroTier creates a virtual L2 network over the internet. Devices in the same network communicate as if on a LAN.

Advantages:

• Install client + enter network ID.
• Manage access through ZeroTier Central.
• No port forwarding, works behind NAT.
• SMB sharing is available remotely without changes.

Tailscale on WireGuard

Tailscale automates WireGuard tunnels with OAuth authorization (Google/Microsoft).

Process:

• Install on TrueNAS and clients.
• Automatic P2P or relay via DERP.
• ACLs by tags and groups for segmentation.
• Mobile clients for iOS/Android.

Both solutions provide encrypted access to SMB/AFP/NFS without exposing services.

Additional Features

TrueNAS SCALE supports KVM virtual machines for running containers or services on the same hardware. This expands functionality without a separate hypervisor.

In summary, TrueNAS is suitable for middle/senior admins: ZFS guarantees reliability, the web interface minimizes CLI use, and VPN integrations solve remote access.

Key points:

• ZFS provides self-healing and snapshots without extra software.
• VPN (ZeroTier/Tailscale) for secure remote SMB access.
• Real-time monitoring and notifications.
• VM support for flexibility.
• Suitable for budget-friendly self-hosted scenarios.

— Editorial Team