Admin guide
System admin responsibilities: drives, replica policy, users, health, and ops lists.
ACL note. System admin does not bypass folder permissions for
browse/download/mutate. You only see folders you own or are shared into - same as any
user. Ops lists show abbreviated names plus owner username, not full paths for casual
browsing.
Drives
- Register and monitor bind-mounted drives (online/offline, free space, errors).
- Alerts when a drive fails or stays persistently full.
-
Optional SMART monitoring when
SMART_DEVICESis configured - see Security for privilege tradeoffs. - Adding or remounting drives usually means updating
DRIVES/ overrides and recreating the API container (make update/make start).
Replica settings
Global defaults in admin settings:
| Setting | Typical default |
|---|---|
| Normal replicas | 1 |
| Medium replicas | 2 |
| High replicas | all healthy drives (or fixed N) |
| Auto-rebalance | On - moves Normal blobs only |
At-risk and compliance
- Admin at-risk list: non-compliant files, filterable by drive.
- Background sweeps retry missing copies when space appears.
- Integrity / quarantine style ops panels help find and repair inconsistent state.
Users
- Create and manage local users.
- Reset passwords and clear TOTP when a user is locked out.
- Optionally enable API keys globally and restrict which users may create them.
Activity and overview
Activity log covers security-relevant events (e.g. refresh-token reuse) and operational signal. Overview panels summarize pool health, jobs, and storage.
Media / thumbnails / sync ops
Depending on version, admin may trigger media rescans, thumbnail rebuilds, or sync backfill jobs. Watch job status panels before stacking heavy work on a busy pool.
Operational checklist
- Keep
deploy/.envout of git; rotate secrets carefully. - Back up Postgres (
pgdata) separately from drive bind mounts. - Terminate TLS at a reverse proxy; do not expose the API port publicly.
- Monitor free space and at-risk counts after large High-tier uploads.
- Revoke device tokens and API keys when machines or users leave.
Related: Install · Configuration · Concepts