DPlaneOS v7.5.2

storageTotal Raw

32.7 TB

4 drives, RAID-Z1

databaseUsable

21.4 TB

14.2 TB used (66%)

deployed_codeContainers

12

↑ 11 running

historySnapshots

847

across 6 datasets

Pool Health

All ONLINE

data

RAID-Z1 · 4 disks

ONLINE

14.2 TB used 21.4 TB total

backup

Mirror · 2 disks

ONLINE

3.1 TB used 11.4 TB total

ssd-cache

Stripe · 2 NVMe

ONLINE

87 GB used 500 GB total

System

CPU 23%

RAM 18.4 / 32 GB

ARC Cache 12.1 GB

Uptime

47d 12h

Temp

42 °C

Read

1.2 GB/s

Write

340 MB/s

Containers

🌐

traefik

traefik:v3.1 · :80,:443

running

🔐

authentik

ghcr.io/goauthentik/server:2024

running

📊

grafana

grafana/grafana:11 · :3000

running

📡

prometheus

prom/prometheus:v2 · :9090

running

🦆

immich

ghcr.io/immich-app/immich · :2283

running

Audit Log

admin

Pool data scrub completed

✓ 12m ago

system

Snapshot data/media@auto-2026 created

✓ 1h ago

admin

Container immich updated

✓ 3h ago

admin

LDAP sync completed — 23 users

✓ 6h ago

admin

Login from 192.168.1.42

8h ago

data

raidz1-0

ONLINE

14.2 TB / 21.4 TB66%

Read

1.2 GB/s

Write

340 MB/s

Errors

0

2× WD 14TB 2× IronWolf Pro 12TB

backup

mirror-0

ONLINE

3.1 TB / 11.4 TB27%

Read

210 MB/s

Write

95 MB/s

Errors

0

2× Seagate 8TB

ssd-cache

stripe

ONLINE

87 GB / 500 GB17%

Read

3.5 GB/s

Write

2.1 GB/s

Errors

0

2× Samsung 980 Pro 256G

Datasets

Name	Type	Used	Available	Compression	Encryption	Mountpoint
data/media	filesystem	8.4 TB	7.0 TB	lz4	off	/mnt/media
data/docker	filesystem	2.1 TB	7.0 TB	lz4	off	/var/lib/docker
data/encrypted	filesystem	1.8 TB	7.0 TB	lz4	aes-256-gcm	/mnt/vault
data/backups	filesystem	1.9 TB	7.0 TB	gzip-9	off	/mnt/backups

Container	Image	Status	CPU	Memory	Ports
🌐 traefik stack: proxy	traefik:v3.1	running	0.3%	48 MB	80,443
🔐 authentik-server stack: auth	goauthentik/server:2024.8	running	1.2%	310 MB	9000,9443
📊 grafana stack: monitoring	grafana/grafana:11.1	running	0.8%	178 MB	3000
🦆 immich-server stack: media	immich-app/immich:v1.113	running	3.4%	820 MB	2283
📁 nextcloud stack: cloud	nextcloud:28-apache	stopped	—	—	8080

check_circle

Cluster healthy — Primary: nas-01 · Standby: nas-02 · Quorum: satisfied

VIP 192.168.1.100 online · ZFS last synced 4 min ago · Patroni leader lock held · Hysteresis: inactive

hubHA Enabled

Active

NixOS module loaded

timerEstimated RTO

~90s

STONITH + ZFS import + HAProxy

historyZFS Lag

4min

RPO — 30s interval configured

nas-01

192.168.1.10 · Minisforum MS-01

Primary

Patroni RoleLeader

ZFS RoleActive

PostgreSQLRead-Write

VIP (Keepalived)192.168.1.100

HAProxyHealthy

Subordinate ModeOff

HysteresisInactive

Missed Heartbeats0

Last Heartbeat2s ago

nas-02

192.168.1.11 · Minisforum MS-01

Standby

Patroni RoleReplica

ZFS RoleStandby

PostgreSQLRead-Only

VIP (Keepalived)Standby

HAProxyHealthy

Subordinate ModeOff

HysteresisInactive

Missed Heartbeats0

Last Heartbeat3s ago

etcd Witness (RPi5)

Hostrpi5-witness

Statehas-quorum

Members3 / 3

Leadernas-01

STONITH Status

MethodIPMI + PDU

nas-01 BMCReachable

nas-02 BMCReachable

PDU FencingConfigured

Jitter Max3000 ms

Recovery Targets

RTO~90s

RPO~4 min

VIP FailoverKeepalived

Auto-PromoteEnabled

Failover After3 missed beats

Node ID	Name	Address	Role	State	Version	Missed Beats	Last Seen	Actions
a3f8c1d2	nas-01 (local)	http://192.168.1.10:9000	Primary	healthy	v7.5.2	0	2s ago	local
b9e2a4f1	nas-02	http://192.168.1.11:9000	Standby	healthy	v7.5.2	0	3s ago

URL	Expected Status	Body Regex	Strict TLS	Live Status	Actions
http://192.168.1.1/health	200	—	off	reachable
http://rpi5-witness.local:8080/ping	200	ok	off	reachable

tuneGeneral

memoryZFS / ARC

notificationsAlerting

lockTLS / ACME

terminalNixOS Guard

backupSupport Bundle

General Settings

Hostname

Timezone

GUI Port

Session Timeout (s)

WebSocket Alerts

Push real-time alerts to connected browser sessions

Periodic Background Monitor

inotify, memory, I/O wait health checks every 30s

Real-Time Priority

Elevate dplaned scheduling priority (SCHED_FIFO)

ZFS ARC & Performance Tuning

Changes apply live via /proc/sys/module/zfs/parameters and persist via modprobe.d

ARC Max Size

Maximum ZFS ARC cache. Current usage: 12.1 GB. System RAM: 32 GB.

16 GB

VM Swappiness

Lower = prefer RAM over swap. Recommended 1–10 for ZFS.

10

Memory Warning Threshold

Alert when RAM usage exceeds this percentage.

85%

I/O Wait Warning Threshold

Alert when iowait exceeds this percentage (sustained).

20%

inotify Watch Warning Threshold

Alert when inotify watch usage exceeds this percentage of max_user_watches.

80%

Current ARC Stats

ARC Size

12.1G

Hit Rate

98.4%

MFU

8.2G

MRU

3.9G

Alert Channels

📧

Email (SMTP)

Send alerts to email. Configured.

✈️

Instant push to Telegram bot. Not configured.

🪝

Webhook

POST JSON payload to any URL.

SMTP Configuration

Host

Port

Username

Password / App Password

From Address

To Address(es) — comma separated

TLS / STARTTLS

Alert Triggers

Pool DEGRADED / FAULTED

Disk SMART failure

Disk temperature threshold

Pool capacity warning (> 80%)

Replication failure

Container crash / exit

HA failover event

Scrub completed

TLS / ACME (Let's Encrypt)

Automatic certificate provisioning via ACME protocol. Supports HTTP-01 and DNS-01 challenges.

Enable ACME

Automatically obtain and renew certificates

Email

ACME Server

Challenge Type

Domains (one per line)

Certificates

Domain	Expires	Managed	Status
nas.home.arpa	2026-07-01	ACME	valid
dplaneos.home.arpa	2026-07-01	ACME	valid

NixOS Config Guard

Declarative system configuration with rollback watchdog

NixOS detected

Current generation 287

Watchdog status active (30 min window)

Drift from intent No drift detected

Last reconcile 3h ago

Generation History

#	Date	Kernel	DPlaneOS	Actions
287	2026-04-01 14:22	6.6.82	v7.5.2	current
286	2026-03-15 10:08	6.6.79	v7.5.1
285	2026-03-01 09:45	6.6.76	v7.5.0

Support Bundle

Collect logs, system info, and diagnostics for support tickets. Sensitive data (passwords, keys) is redacted.

Include system logs (last 48h)

Include ZFS pool status

Include SMART data

Include Docker container list

Include network config

check_circle

LDAP connected — last sync 6h ago · 23 users synced

ldap.home.arpa:389 · TLS · Bind DN: CN=dplaneos-svc,CN=Users,DC=home,DC=arpa

Directory Provider

🪟

Active Directory

Microsoft AD / Azure AD

📂

OpenLDAP

Generic LDAP v3

🍎

Apple Open Directory

macOS Server

Connection

Server

Port

Security

Bind DN

Bind Password

Base DN

Sync Settings

LDAP Enabled

Allow directory users to log in

JIT Provisioning

Auto-create accounts on first login

Sync Interval

Default Role

Group → Role Mappings

LDAP Group	DPlaneOS Role
CN=NAS-Admins,DC=home,DC=arpa	admin
CN=NAS-Users,DC=home,DC=arpa	user
CN=NAS-Readonly,DC=home,DC=arpa	viewer

Username	Display Name	Role	Source	2FA	Last Login	Status	Actions
A admin	Administrator	admin	local	TOTP	2026-04-02 09:14	active
D dan	Dan	user	local	—	2026-04-01 18:30	active

Role	Display Name	Permissions	Users	System
admin	Administrator	storage:* docker:* system:*	2	built-in
user	Standard User	storage:read docker:read	1	built-in
viewer	Read-Only	*:read	1	built-in

Name	User	Scopes	Prefix	Last Used	Expires	Actions
Grafana Metrics	admin	read	dpkey_Gr...	2h ago	never
CI/CD Pipeline	admin	read write	dpkey_CI...	3d ago	2027-01-01

verified_user

License Active — Enterprise Tier

Ed25519 signature verified. Audit chain integrity: PASS. Last verification: 2 minutes ago.

policyAudit Records

12,847

HMAC chain intact

linkChain Breaks

0

No tampering detected

descriptionReports Generated

4

Last: 2026-03-01

Compliance Reports

Report	Standard	Period	Status
SOC 2 Type II — Q1 2026	SOC 2	Jan–Mar 2026	Ready
ISO 27001 Audit — 2026	ISO 27001	Jan 2026	Ready
SOC 2 Type II — Q4 2025	SOC 2	Oct–Dec 2025	Ready

#	Timestamp	Actor	Action	Resource	Result	IP
12847	2026-04-02 09:14:22	admin	auth.login	session	OK	192.168.1.42
12846	2026-04-02 08:00:01	system	zfs.snapshot.create	data/media	OK	localhost
12845	2026-04-02 04:00:00	system	zfs.scrub.complete	data	OK	localhost
12844	2026-04-01 22:45:11	admin	docker.container.restart	immich	OK	192.168.1.42
12843	2026-04-01 18:30:44	dan	auth.login	session	OK	192.168.1.55
12842	2026-04-01 14:12:03	system	ldap.sync.complete	LDAP	OK	localhost

Git Repositories

Repo	Branch	Auth	Auto-Sync	Last Commit	Status	Actions
homelab github.com/4nonX/homelab	main	PAT	5 min	a4f2c19 · 3h ago	In Sync
private-configs gitea.home.arpa/dan/private-configs	main	SSH key	manual	8c3a111 · 2d ago	In Sync

Drift Detection

check_circle proxy

In Sync

check_circle monitoring

In Sync

check_circle media

In Sync

check_circle auth

In Sync

GitOps Engine

Convergence checks 500+ passes

Pool GUID import enabled

Ambiguity detection enabled

Mountpoint verification enabled

Docker readiness gate PASS

Last full convergence 3h ago

Git Credentials Store

Name	Host	Auth Type	Notes	Actions
github-pat	github.com	PAT token	Main GitHub account
gitea-ssh	gitea.home.arpa	SSH key	Local Gitea instance

Name

Used

Avail

Refer

Compress

Encrypt

Mountpoint

storage

data

pool · raidz1 · 21.4 TB

Used

14.2T

Avail

7.0T

Refer

192K

Compress

—

Encrypt

off

Mount

/data

folder

data/media

filesystem · 847 snapshots

Used

8.4T

Avail

7.0T

Refer

8.4T

Compress

lz4 · 1.23×

Encrypt

off

Mount

/mnt/media

photo_library

data/media/photos

filesystem · 214 snapshots

Used

2.1T

Avail

7.0T

Refer

2.1T

Compress

lz4 · 1.01×

Encrypt

off

Mount

/mnt/media/photos

deployed_code

data/docker

filesystem · 120 snapshots

Used

2.1T

Avail

7.0T

Refer

2.1T

Compress

lz4 · 1.41×

Encrypt

off

Mount

/var/lib/docker

lock

data/encrypted

filesystem · encrypted · 98 snapshots · unlocked

Used

1.8T

Avail

7.0T

Refer

1.8T

Compress

lz4 · 1.18×

Encrypt

aes-256

Mount

/mnt/vault

storage

backup

pool · mirror · 11.4 TB

Used

3.1T

Avail

8.3T

Refer

192K

Mount

/backup

sync_alt

backup/nas-replication

filesystem · replication target · 312 snapshots

Used

3.1T

Avail

8.3T

Refer

3.1T

Compress

gzip-9 · 1.82×

Encrypt

off

Mount

/backup/nas

Snapshot	Dataset	Created	Used	Refer	Age
auto-2026-04-02_08:00	data/media	2026-04-02 08:00	1.2 GB	8.4 TB	1h ago
auto-2026-04-02_00:00	data/media	2026-04-02 00:00	3.8 GB	8.4 TB	9h ago
auto-2026-04-01_08:00	data/media	2026-04-01 08:00	5.1 GB	8.3 TB	1d ago
auto-2026-04-02_08:00	data/docker	2026-04-02 08:00	480 MB	2.1 TB	1h ago
pre-upgrade-v7.5.2	data	2026-04-01 14:22	0 B	8.4 TB	1d ago

Showing 5 of 847 snapshots

Last Run

4m ago

All tasks succeeded

Transferred Today

14.2 GB

Across 3 tasks

SSH Keys

Ed25519

Deployed to 2 targets

Replication Tasks

Source Snapshot	Remote Host	Remote Pool	Mode	Rate Limit	Schedule	Last Status
data/media@latest	backup-server.local	backup/nas-replication	incremental	100 MB/s	0 /4 * *	OK · 4m ago
data/docker@latest	backup-server.local	backup/docker	incremental	50 MB/s	0 /6 * *	OK · 2h ago
data/encrypted@latest	offsite-nas.vpn	offsite/vault	full	unlimited	0 2 * * 0	OK · 6d ago

SSH Key Management

ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAI... dplaneos@homelab-nas

smbd is running Samba 4.19.3

Share Name	Path	Access	Options	Status
Media Main media library	/mnt/media	all users	read/write recycle bin shadow copy	active
TimeMachine Apple Time Machine target	/mnt/media/backups/tm	dan, admin	time machine vfs_fruit quota: 2TB	active
Vault Encrypted dataset share	/mnt/vault	admin only	read/write no guest	active
Public Guest read access	/mnt/media/public	guest allowed	read only	active

Export Path	Clients	Options	Status	Actions
/mnt/media	192.168.1.0/24	rw,sync,no_subtree_check,no_root_squash	exported
/mnt/media/photos	192.168.1.42	ro,sync,no_subtree_check	exported

proxy

/var/lib/dplaneos/stacks/proxy/docker-compose.yml

running

🌐 traefik 🔒 crowdsec

schedule last deploy: 3d ago git_branch main@a4f2c19

monitoring

/var/lib/dplaneos/stacks/monitoring/docker-compose.yml

running

📊 grafana 📡 prometheus 📬 alertmanager

schedule last deploy: 5d ago git_branch main@a4f2c19

media

/var/lib/dplaneos/stacks/media/docker-compose.yml

running

🦆 immich 🎬 jellyfin 📥 qbittorrent 🗂 filebrowser

schedule last deploy: 1d ago git_branch main@a4f2c19

auth

/var/lib/dplaneos/stacks/auth/docker-compose.yml

running

🔐 authentik-server 🔐 authentik-worker 🐘 postgresql

schedule last deploy: 7d ago git_branch main@a4f2c19

info

Safe Update — ZFS Snapshot + Rollback

Before updating any container, DPlaneOS creates a ZFS snapshot of the data dataset. If the health check fails after the update, it automatically rolls back both Docker and ZFS. Zero downtime for healthy updates.

cable

bond0

LACP bond (eth0 + eth1) · Active-Active

UP

IPv4192.168.1.10/24

IPv6fd00::10/64

Gateway192.168.1.1

Speed2 × 1 Gbps

MACaa:bb:cc:dd:ee:ff

RX / TX2.4 TB / 1.1 TB

speed

sfp0

SFP+ 10GbE · Mellanox ConnectX-3

UP

IPv410.10.0.1/24

IPv6—

Gateway—

Speed10 Gbps

MAC00:11:22:33:44:55

RX / TX8.1 TB / 4.3 TB

lan

bond0.100

VLAN 100 on bond0 · IoT network

UP

IPv4192.168.100.1/24

VLAN ID100

MTU1500

PurposeIoT isolation

dns

DNS

Resolved via systemd-resolved

OK

Primary DNS192.168.1.1

Secondary DNS1.1.1.1

Domainhome.arpa

DNSSECallow-downgrade

/dev/sda

WD Gold 14TB · WD141KRYZ · SN: WDC1234567

PASSED

Temp

38 °C

Power-On

4,210h

Load Cycle

1,240

Key SMART Attributes

1Raw Read Error Rate

200

5Reallocated Sectors

0

9Power-On Hours

4210

197Current Pending Sectors

0

198Offline Uncorrectable

0

/dev/sdb

WD Gold 14TB · WD141KRYZ · SN: WDC7654321

PASSED

Temp

39 °C

Power-On

4,208h

Load Cycle

1,192

Key SMART Attributes

1Raw Read Error Rate

200

5Reallocated Sectors

0

9Power-On Hours

4208

197Current Pending Sectors

0

198Offline Uncorrectable

0

/dev/sdc

Seagate IronWolf Pro 12TB · ST12000NE0008 · SN: ZHZ1ABCD

WARNING

Temp

47 °C

Power-On

18,420h

Load Cycle

42,180

warning

Temperature elevated (47 °C). Recommend improving airflow. Threshold: 45 °C.

Key SMART Attributes

5Reallocated Sectors

0

190Airflow Temperature

47

197Current Pending Sectors

0

/dev/sdd

Seagate IronWolf Pro 12TB · ST12000NE0008 · SN: ZHZ1EFGH

PASSED

Temp

41 °C

Power-On

18,415h

Load Cycle

41,990

Key SMART Attributes

5Reallocated Sectors

0

190Airflow Temperature

41

197Current Pending Sectors

0

admin@homelab-nas:~$

WebSocket terminal — connected

Live stream

Apr 02 09:14:22 homelab-nas dplaned[1234]: INFO auth: admin login from 192.168.1.42 [session: sess_A7f...]

Apr 02 09:00:01 homelab-nas dplaned[1234]: INFO zfs: snapshot data/docker@auto-2026-04-02_09:00 created (480MB)

Apr 02 08:00:01 homelab-nas dplaned[1234]: INFO zfs: snapshot data/media@auto-2026-04-02_08:00 created (1.2GB)

Apr 02 07:58:44 homelab-nas smartd[501]: WARN Device: /dev/sdc, Temperature 47°C exceeds threshold 45°C

Apr 02 07:00:00 homelab-nas dplaned[1234]: INFO gitops: pull homelab@main — already up to date

Apr 02 06:00:00 homelab-nas dplaned[1234]: INFO replication: data/media → backup-server.local completed (4.2GB, 98s)

Apr 02 05:00:00 homelab-nas dplaned[1234]: INFO gitops: pull homelab@main — a4f2c19 → a4f2c19, no changes

Apr 02 04:00:00 homelab-nas dplaned[1234]: INFO zfs: scrub complete on pool data — 0 errors, repaired 0B

Apr 02 03:58:11 homelab-nas kernel: WARN ZFS: pool 'data' scrub in progress for 01:58:11 (ETA 00:04)

Apr 02 02:00:00 homelab-nas dplaned[1234]: INFO zfs: snapshot data/encrypted@auto-2026-04-02_02:00 created (0B)

Apr 01 22:45:11 homelab-nas dplaned[1234]: INFO docker: container immich restarted by admin [session: sess_A7f...]

Apr 01 20:00:01 homelab-nas dplaned[1234]: INFO ldap: sync completed — 23 users, 0 created, 2 updated, 0 disabled (420ms)

Apr 01 18:30:44 homelab-nas dplaned[1234]: INFO auth: dan login from 192.168.1.55 [session: sess_B2c...]

Apr 01 16:22:03 homelab-nas patroni[4421]: INFO Patroni: leader lock acquired by nas-01. TTL=30s

Apr 01 14:22:07 homelab-nas dplaned[1234]: INFO nixos: OTA update applied — v7.5.1 → v7.5.2, pre-upgrade snapshot created

Apr 01 14:20:01 homelab-nas dplaned[1234]: INFO zfs: pre-upgrade snapshot data@pre-upgrade-v7.5.2 created

— older entries —

check_circle

DPlaneOS v7.5.2 — up to date

Last checked: 2026-04-02 09:00. System packages: 3 updates available.

DPlaneOS Version

NixOS flake-based OTA

Current version v7.5.2

Available v7.5.2 (latest)

Pre-upgrade snapshot auto-created

Rollback window 30 min post-update

System Packages

3 upgradable packages

zfsutils-linux

2.2.3 →

2.2.4

security

docker-ce

26.1.3 →

26.1.4

bugfix

samba

4.19.3 →

4.19.4

bugfix

Upgrade History

Version	Applied	Pre-Upgrade Snapshot	Status
v7.5.2	2026-04-01 14:22	data@pre-upgrade-v7.5.2	active
v7.5.1	2026-03-15 10:08	data@pre-upgrade-v7.5.1	superseded
v7.5.0	2026-03-01 09:45	data@pre-upgrade-v7.5.0	superseded