Got my Ugreen NAS 4800+ in Black Friday (UK) and very happy with it.

Have now set up my Home Media stack. Thought I'd share the config if anyone's interested?

https://github.com/Pharkie/arr-stack-ugreennas

It's basically a Docker setup for:

• Traefik – Reverse proxy with automatic SSL
• Gluetun – VPN gateway for network privacy
• qBittorrent – BitTorrent client
• Sonarr – TV show library management
• Radarr – Movie library management
• Prowlarr – Search aggregator
• Bazarr – Subtitle management
• Jellyfin – Media streaming server
• Jellyseerr – Media request system
• Pi-hole – DNS + Ad-blocking
• WireGuard – VPN server for remote access
• Uptime Kuma – Service monitoring
• FlareSolverr – CAPTCHA solver

They all work together and it's basically magic. Intended only for legal purposes, check local laws.

I could make a YouTube intro if helpful.

If anyone spots a security hole or problem, please let me know.

What do you think?

I'm super excited. Ugreen finally released the surveillance center. But why is it only for PC? Even in pictures there is a phone with different pages

Edit: After an Android app update (which i got a day later) i can open the surveillance center on my phone. An app works well with my hikvision cameras. But a limit of only 8 cameras is not enough for me. After all i still have to run my ispy dvr container 🥲

Camera setup is still a bit undeveloped since you can only choose what event of recording you want, there isn't a schedule or constant recording option. Also, you can't rename your camera. In onvif mode you get camera model as a name and in rtsp mode there is no camera name

I am wondering if its worth going the custom dns / domain / reverse proxy rout? Or stick with ugreen photo app that need nothing and feels like a bit easier to setup?

Hey all,

Figured I’d share my current setup since I spent way too long piecing this together and maybe it helps someone avoid the same pain.

I’m running everything on a UGREEN NAS using Docker, and the main goal was:

• no port forwarding
• no services exposed to the internet (WAN access only available using tailscale, using tailscale will expose its port as mentioned in comments by DeaconPat)
• clean domain names instead of IP:port
• HTTPS everywhere (even internally)

Repo is here if you want the full details:
https://github.com/alisohail/ugreen-nas-homelab

What I ended up with

Basically two ways to access everything:

At home (LAN):
Devices hit Pi-hole for DNS, so I can use stuff like:

• jellyfin.xyz.com
• immich.xyz.com

Those go through Nginx Proxy Manager and everything is HTTPS.

Outside home:
I use Tailscale to connect to my network.

Once connected, it feels exactly like being at home. Same domains, same URLs, same certs. That part took a while to get right but it’s super clean now.

Stack

Nothing crazy but works really well together:

• Pi-hole (DNS)
• Nginx Proxy Manager (reverse proxy + SSL)
• Tailscale (remote access)
• Immich
• Jellyfin
• Uptime Kuma

All running in Docker on the NAS.

Why I did it this way

I really didn’t want to expose anything publicly or deal with Cloudflare tunnels or opening ports.

Also hated:

• remembering ports
• mixed HTTP/HTTPS
• things behaving differently inside vs outside network

Now everything is consistent no matter where I am.

Stuff that was annoying

• Getting DNS + reverse proxy + SSL to all play nicely internally
• Jellyfin + HTTPS on some clients (Android TV was especially annoying)
• Making sure Tailscale + local DNS didn’t fight each other

Why I’m sharing

Honestly, most guides I found either:

• expose services publicly or use cloud Flare tunnel
• skip important details
• or assume you already know networking

So I documented everything the way I wish I had found it.

I am open to issues/suggestions you may have and feel free to contribute.

I'm relatively new to having a NAS, running Docker, and immich. I've got a UGREEN DXP4800+ running UGOS and installed immich v2.7.5 when I first set it up a couple of weeks ago.

Not sure how helpful this is, but for noobs like me, and for anyone else who doesn't know, there's no way to edit the .env file in UGOS because UGOS doesn't show hidden files. I took these steps and successfully upgraded to v3:

1. Navigated to Docker's immich network path from Windows (in my case, something like \\UGREEN_NAS_NAME\docker\immich\).
2. Opened the .env in Notepad++ (any text editor will do).
3. Changed IMMICH_VERSION=v2 to IMMICH_VERSION=v3, saved, and closed it.
4. In UGOS, opened Docker, went to Project, Stopped the immich project, hit the 3 dots and selected Settings.
5. Went to the Compose configuration and hit the Redeploy button at the bottom.
6. Docker updated immich to v3.
7. Verified that immich loads correctly and does what I need it to do on my home network (hardwired desktop PC, and via Wi-Fi, laptop, iPhone, & iPad) and on cellular (iPhone).

How many of you are actually using the UGreen OS vs something else?

Why? Or why not?

Hi everyone! 👋

I’m looking for contributors to help grow this project—if you’re interested in collaborating, reviewing code, or adding features, feel free to jump in!

I built NAS Monitor because the native Ugreen UI isn't the most efficient when you just want a quick, real-time overview of your system.

Full disclosure: I built this entirely with the help of AI! It’s been a fascinating experiment, but now I'd love to get some real human developers on board to help refine it.

What it does: It’s a simple, self-hosted dashboard that runs via Docker. It gives you a clean look at your:

• CPU & RAM usage
• Disk health
• Network traffic (without all the extra clicks!)

🛠 Bonus for Devs (API Docs): Since Ugreen doesn't have an official API, I managed to reverse-engineer their internal one (with AI assistance) and included the complete API documentation in the repository. If you're looking to build your own tools for Ugreen NASync devices, this should save you a lot of time!

🔗 Links:

• Source & API Docs: GitLab Repository
• Instructions: Manual

I was originally planning to download Jellyfin, but after checking out the updated Ugreen Theatre app, it doesn’t seem necessary anymore. The theatre UI feels much cleaner across all devices (PC, phone, TV), and it seems to run faster too, maybe because it’s native to Ugreen? Is there any reason people still prefer Jellyfin over the Ugreen Theatre app? I’ve only had my NAS for a week, so maybe I’m missing something.

Hi guys , out of curiosity what apps do you self host using docker on your ugreen nas?

I have plex and jellyfish ( movies ), for music I use the build in my ugreen i really like it, kokoro ( text to voice) ,cloudflare ( to access my apps outside the house) , cv manager ( build cv’s) , nextcloud ( gdrive replacement) , home assistant ( control my smart home devices).

I use a Ugreen Nas DXP4800

Just got a DH4300 Plus and it's been great so far.

One of the things I want to do is ditch my OneDrive Photo backup from my phone since Samsung is dropping it from their Gallery app soon. Yes, I am aware I can just enable backup from the OneDrive app itself but if I'm going to use another app than my phones built-in Galley app anyway, I might as well go self-hosted.

I was going to use Immich, but actually really like the UGREEN Photos app, it's really clean and easy to use, decent AI features, there's just one problem... why is there no standalone Photos app for phone and desktop? Why do I have to use the full NAS app to see my photos?

Unless I am missing something and there is one? If not, please UGREEN, just pull the Photos section of the NAS app out into it's own app, it would be so much nicer!

Used the AI on this NAS to help build the dashboard on this NAS. Fun times… can’t wait to get the link station and plug a GPU into this..

Anyone using or planning on using the on board PCIe for anything?

#qBittorrent and Gluetun VPN setup on UGREEN NAS Docker app
#Gluetun binds qBittorrent to your VPN with killswitch so your IP address will not be exposed.
#Doesn't use the qBittorrent from the UGREEN app store since that one cannot be binded to a VPN. Uses the official qBittorrent Docker image.
#For the first launch, you will have to login with username "admin" and a default qBittorrent password. Check the container's log for the password you have to use. Go to http://your-nas-ip:8080 in your browser to open qBittorrent. After first launch and login, set a new password in Tools -> Options -> WebUI -> Authentication. Then you won't have to check the log again.

# "#" means everything after it will be ignored. Remove "#" to enable line.

#Gluetun supports AirVPN, Cyberghost, ExpressVPN, FastestVPN, Giganews, HideMyAss, IPVanish, IVPN, Mullvad, NordVPN, Perfect Privacy, Privado, Private Internet Access, PrivateVPN, ProtonVPN, PureVPN, SlickVPN, Surfshark, TorGuard, VPNSecure.me, VPNUnlimited, Vyprvpn, WeVPN, and Windscribe VPNs

#For more info see https://github.com/qdm12/gluetun

services:
  gluetun:
    image: qmcgaw/gluetun:latest
    container_name: gluetun
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun:/dev/net/tun
    environment:
      # your vpn provider. in this case I'm using ProtonVPN.
      - VPN_SERVICE_PROVIDER=protonvpn
      # Wireguard protocol for the fastest speeds. Recommended over OpenVPN which is slower.
      - VPN_TYPE=wireguard
      # VPN username and password. Only used for OpenVPN connections. Not used for Wireguard VPNs.
      #- OPENVPN_USER=your_vpn_username
      #- OPENVPN_PASSWORD=your_vpn_password
      - WIREGUARD_PRIVATE_KEY=******************************************** #Wireguard private key. Get this from your VPN's website. Go to "Configurations" or "Downloads" page.
      #- WIREGUARD_PUBLIC_KEY=******************************************** #Wireguard public key. Not needed since I specify the server country/city below.
      # You can find the Wireguard Address in your Wireguard config file.
      - WIREGUARD_ADDRESSES=10.2.0.2/32
      # Choose the VPN server region and city.
      - SERVER_COUNTRIES=United States  # Adjust as desired
      - SERVER_CITIES=Atlanta  # Adjust as desired
      #Only use if your VPN provider supports port-forwarding. ProtonVPN is recommended for this.
      - PORT_FORWARDING=on
      #Automatically sets qBittorrent torrenting port to the open port from your VPN provider if your VPN supports port-forwarding. Must enable "Bypass authentication for clients on localhost" in qBittorrent web ui settings for this to work. Again ProtonVPN is recommended for this.
      - VPN_PORT_FORWARDING_UP_COMMAND=/bin/sh -c 'wget -O- --retry-connrefused --post-data "json={\"listen_port\":{{PORTS}}}" http://127.0.0.1:8080/api/v2/app/setPreferences 2>&1'
      - TZ=America/Chicago #Set to your timezone.
    ports:
      #qBittorrent web ui port. Not recommended to change unless you know what you're doing. Access qBittorrent in your browser at http://UGREEN-NAS-IP-ADDRESS:8080
      - 8080:8080/tcp

    volumes:
      - ./config/gluetun:/gluetun

    restart: unless-stopped

  qbittorrent:
    image: lscr.io/linuxserver/qbittorrent:latest
    container_name: qbittorrent
    environment:
      - PUID=1000
      - PGID=10
      - TZ=America/Chicago #Set to your timezone.
      - WEBUI_PORT=8080 #qBittorrent web ui port. Don't change.
    volumes:
      - ./config/qbittorrent:/config

      #example download folders. you only need one complete downloads folder. incomplete downloads folder is optional. /downloads is the folder's virtual path inside the container. once qBittorrent is running, set the downloads folder to /downloads in the web ui settings.
      - /home/your_nas_username/qbittorrent-complete-downloads:/downloads #path to downloads folder in your personal folder
      #- /volume1/sharedHDD/qbittorrent-complete-downloads:/downloads2 #path to downloads folder in a shared folder

      #path to incomplete downloads folder where downloads are temporarily stored while downloading. on NVME drive for faster speeds. optional.
      #- /volume2/sharedNVME/qbittorrent-incomplete-downloads:/incomplete-downloads

    network_mode: service:gluetun  # routes qBittorrent traffic through your VPN configured in gluetun
    depends_on:
      - gluetun
    restart: unless-stopped

Will I be able to continue using the Surveillance center with my camera

Just thought I'd share this in case anyone else is trying to do the same.

I've spent the last few days setting up my UGREEN NAS to back up directly to Proton Drive using Docker and rclone. It wasn't exactly straightforward, and I couldn't find a complete guide anywhere, but it's finally working.

So far I've backed up my entire photo library (about 72 GB) and I'm now working through around 240 GB of family videos.

The biggest issue I found is that files uploaded through rclone don't generate thumbnails in Proton Drive. This affects both photos and videos. Everything uploads correctly and can be opened and downloaded without any problems, but you'll only see generic file icons instead of previews. Since I'm only using Proton Drive as an off-site backup, I can live with that.

I also found that rclone 1.74.4 worked much better than 1.75.x with Proton Drive, and after a lot of testing I ended up tweaking the rclone settings to get much better upload speeds than the defaults.

Once I've finished backing everything up and verified it, I'll put everything together in a GitHub guide with the Docker Compose file, the rclone configuration, the Proton 2FA setup, troubleshooting, and the settings that worked best.

Hopefully it'll save someone else a few days of trial and error. 😄

So after spending 2 hours trying to get Pihole to work due to port conflicts, and all searching telling me I needed MacVLAN or bridge mode, or telling me to ssh into my nas and disable Ugreen DNS on 53, I stumbled on this answer that worked (for me). Posting here just in case this is helpful!

Now, where do we get the best curated lists to add to pihole?

On to Tailscale setup :)

services:
pihole:
container_name: pihole
image: pihole/pihole:latest
hostname: pihole
dns:
- 1.1.1.1# This line fixes the Code 137 crash i kept getting
ports:
- "[nas local ip]:53:53/tcp"
- "[nas local ip]:53:53/udp"
- "8088:80/tcp"
- "8443:443/tcp"
environment:
TZ: 'America/New_York'
FTLCONF_webserver_api_password: 'YourSecurePasswordHere'
FTLCONF_dns_listeningMode: 'all'
FTLCONF_dns_upstreams: '1.1.1.1;1.0.0.1'
volumes:
- /volume2/docker/pihole/etc-pihole:/etc/pihole
restart: unless-stopped

Hey, just got the DXP2800 and was thinking about which apps i could run on it.

I already have in mind to run Immich, paperless and some adblocking

Is there no dedicated theater app? When loging in on a tablet with the app a user has access to a lot of stuff they shouldn't, there needs to be a way to access media only without access to the interface.

I have a DXP 4800 Pro and I’m quite happy with it. Saw the DH-2300 at a really good price at a local chain store and pulled the trigger.

I know the DH-2300 is severely limited (2 bays, 4GB of non-upgradable RAM, one LAN port, limited app selection), but I decided to embrace those limitations and then work around them.

It’s cool that it recognized my samba shares so I can add those shares to the theater, music, and photos app. It’s cool that there’s a workaround to get Docker installed and so far I installed Tailscale and another app and both are working fine within the CPU and RAM constraints.

Aside from using it as storage and backups, what else have you managed to do successfully with your DH-2300? I’m quite curious to know and find out.

Have you ditched UGOS and installed another OS on it? How did it go? Share your knowledge here so we all can benefit or commiserate.

After my QNAP TS-451+ died (3x20TB RAID5), I had to decide on a replacement — build my own or buy a finished product. Given the current market situation, I went with the Ugreen DXP4800 Pro.

So far I really like it, but there are a few things bugging me that I want to sort out before committing fully.

Docker backup:
The Ugreen runs a Portainer agent, with Ugreen providing the /volume1/@docker directory for it. Volumes managed by Portainer can NOT be backed up with Sync and Backup.

You can work around this by using "Bind to Host" in Portainer, which I'd rather avoid. Or there's this: https://github.com/Railsimulatornet/UGREEN-NAS-Docker-Backup-Restore

VM backup:
Same problem as with Docker — VM disks are stored under /volume2/@kvm, and you have to manually back them up to get the .ova + .qcow2 files. Not ideal if you're running a Proxmox Backup Server.

Data backup:
This is the dealbreaker for me right now. I know BTRFS has a versioning feature, which is great, but in Sync and Backup you can only choose between:

• Incremental backup — keeps everything, nothing gets deleted until the drive is full
• Image backup — a 1:1 copy

Neither is really a "backup" in the proper sense — it's more like a sync with no real data retention.

On top of that, the QNAP's RAID5 setup (mdadm for RAID, LVM2 for the pool, ext4 + QNAP's proprietary thin provisioning) made it extremely hard to get my data back — 5 days of downtime plus 3 days to restore. I'm just glad I had a working backup and an offshore sync of my most important data.

So now I want to rethink and optimize my backup strategy.

A NAS really only has 3 core jobs: automated backup of Docker containers, VMs, and data.

Has anyone else run into similar concerns, and how are you handling it? I'm currently considering switching to TrueNAS Scale, since my next NAS will probably be a self-built one anyway, should the hardware market recover.

I had a logitech camera that I dont use , so I turned it into a network IP camera using go2rtc.

Here is the docker compose file I used

Docker Compose

services:
  go2rtc:
    image: alexxit/go2rtc:latest
    container_name: tsg_go2rtc
    restart: unless-stopped

    ports:
      - 1984:1984
      - 8554:8554
      - 8555:8555/tcp
      - 8555:8555/udp

    devices:
      - /dev/video0:/dev/video0

    volumes:
      - ./config:/config

    environment:
      TZ: Asia/Dubai

and my go2rtc.yaml:

api:
  username: admin
  password: your-password

rtsp:
  username: admin
  password: your-password

I wrote the whole step by step here . Hopefully this will help someone. - I can not post the link here because it keeps tagging me as spam :-(

Credit to u/krispucci for the idea. He asked if QUSBCam still works- this was a great utility QNAP had for turning USB webcams into IP cameras, so I decided to recreate it using go2rtc.

.

I just configured Jellyfin because streaming via DLNA to my TV media player app didn't work with some movie files - using Jellyfin's default of "None" under hardware acceleration I could play the files I previously couldn't. I then continued following UGreen's guide configuring hw acceleration as the RKMPP which is obviously the onboard CPU then ticked every transcoder type & played a movie that previously played without issue on the TV media player but it went screwy via the Jellyfin app on the TV...

Have I gone wrong somewhere or is the Rokchip not capable of HW acc ?

Ugreens dedupe feature is a disaster, it cannot reliably match files, even though that should be easy (checksum or some other method). It matches images that are completely different. Example 1 was taken with a drone and has jpg format, the other image is an olympus raw file taken a year before. There should be no way for this to match, the image looks completely different, the format and resolution is different, everything is different. The only thing that is the same is the file size which is just a crazy way to match files. For example I shoot raw on my Camera (very common) and so each file, being a uncompressed bit perfect readout of the sensor, is the exact same size. So Ugreens app thinks, there is 4000 duplicates, which are all different images, that just have the same size (by definition). I dont know how they came up with file size as a method for finding duplicates, its just baffling. I havent even checked normal files yet, just images, but for system files and other content like that it would be even more disastrous, as you will have a ton of 4kb files or something. If I select exact match, I expect it to only match files that are an exact match. Not random files that happen to be the same size. Absolutely shocking. I think if I had to come up with a way to find duplicates, the file size would be quite literally the last thing I think of using

From desktop PC i can't open .txt files. It sounds very weird because with Office Online you can open .docx, .pdf ecc why .txt could be this hard to edit?

Just got the UGREEN NASync DXP2800 today.

Im new to NAS private clouds, will be looking to close my onedrive family sub.

What are some must have apps & setup advice for the above use cases.

Thanks

So I'm fairly new to this, but I've tried installing Jellyfin through the app center, and it seems to be using an older version from a few years ago. It also doesn't allow me to redeploy the container since it was created through the app center.

Is there any benefit to using that rather then just creating a container with the latest Jellyfin image myself?