Syncthing
Identity
Host
Network
Resources
Depends On
NoneDepended On By
NoneOverview
Syncthing is a continuous file synchronization service running in a lightweight Alpine LXC container on Jack. It operates as a receive-only endpoint, pulling downloads from a remote file server over an encrypted QUIC connection.
Synced files land in the hdd-pool downloads dataset, organized by media category (movies, TV, music, audiobooks, ebooks). From there, files can be sorted into permanent media libraries for streaming and archival.
Architecture
Remote File Server → Syncthing (QUIC, TLS 1.3) → Jack CT 104
↓
/hdd-pool/downloads/
↓
Future: automated sorting
to /hdd-pool/media/
The remote server runs Syncthing in send-only mode, while Jack runs in receive-only mode. This one-way sync ensures the remote server remains the source of truth — local deletions (e.g., after processing) don't propagate back.
Service Details
| Item | Detail |
|---|---|
| Container | CT 104, Alpine 3.23, unprivileged LXC |
| Resources | 1 vCPU, 256MB RAM, 2GB disk |
| Web UI | Port 8384 (HTTPS, self-signed) |
| Domain | sync.hake.rodeo (via Caddy reverse proxy) |
| Sync Protocol | QUIC with TLS 1.3 |
| Init System | OpenRC |
Configuration
- Folder type: Receive Only — prevents accidental upstream deletions
- Watch for changes: Disabled — reduces I/O overhead
- Rescan interval: 1 hour locally, 24 hours on the remote server
- Compression: Metadata only
Network Integration
Caddy (CT 101) terminates TLS for sync.hake.rodeo and reverse-proxies to Syncthing's self-signed HTTPS backend. Pi-hole provides local DNS resolution pointing the domain to Caddy.