VHNIC Incident Register

Last updated: 2026-06-22

This register tracks incidents and investigations without requiring indefinite

retention of raw logs. Each incident should have a durable summary under

incidents/<date-topic>/SUMMARY.md. Raw logs and command output belong under

that incident's evidence/ folder only while they remain useful.

Status Meanings

Active: issue is ongoing and raw evidence should usually be kept.
Monitoring: immediate issue improved, but recurrence is plausible.
Resolved: summary is sufficient unless the problem returns.
Follow-up: incident is no longer hot, but there are known tasks or health

checks still outstanding.

Raw Evidence Rule

After the review date, raw evidence can be proposed for deletion if:

the incident summary captures the key facts,
no related active issue is open,
no secrets or private keys are involved,
the user approves exact paths.

Incident	Status	System	Impact	Summary	Raw Evidence Review
2026-06-16/17 Volume 1 evacuation/rebuild planning	Active	Synology Volume 1, DX1222 Volume 4, storage migration	Synology Support reported likely memory-related bit flip corruption; unsupported Crucial RAM was removed; Volume 4 `temp_media` now acts as the temporary evacuation landing zone before any Volume 1 remove/recreate/restore decision	`synology/storage/VOLUME1_REBUILD_MIGRATION_PLAN.md`, `synology/storage/CURRENT_STATE.md`, `synology/HANDOFF.md`	Keep migration logs, status outputs, and support-case evidence until rebuild/restore is complete and validated
2026-06-21/22 Volume5 container/appdata staging and cutover	Active follow-up	Synology Docker, Volume5 SSD role, Volume3 Plex/Tautulli, Volume4 backup copy	Most non-Plex container appdata/projects/secrets are now staged or moved under `/volume2/docker-v5`; Plex/Tautulli appdata moved to Volume3; qBittorrent/Gluetun remain staged/stopped pending torrent payload handling; docs need the Volume5 display-name vs mount-path ambiguity verified	`synology/storage/VOLUME1_REBUILD_MIGRATION_PLAN.md`, `synology/docker/PROJECTS.md`, `synology/docker/BACKUP_STRATEGY.md`	Keep Volume5 staging/cutover notes and backup logs until active services and rollback posture are validated
2026-06-14 Plex buffering / Volume 1 Btrfs-md2 integrity issue	Active follow-up	Plex, Synology Volume 1 Btrfs, md2 RAID6	Multiple Plex users saw buffering; evidence points to intermittent Volume 1 storage stalls with recurring Btrfs metadata errors and md2 self-heal retries/give-ups while DSM still reports the array active	`synology/support-cases/20260614-volume1-btrfs-md2/README.md`, `synology/support-cases/20260614-volume1-btrfs-md2/analysis.md`, `synology/docker/plex-incidents/20260614-183159/analysis.md`	Keep support-case evidence until Synology support/rebuild decision
2026-06-01 environment breach/security assessment	Closed / monitor hardening	Synology, Docker, UniFi, Pi-hole, Google Cloud DNS	User requested a breach check; no clear compromise evidence found; hardening follow-ups remain	`security/breach-assessment-20260601.md`	Keep latest privileged Synology audit and June 1 inventory baseline until 2026-12-01; duplicate initial audit/sweep outputs may be removed once summarized
2026-05-30 Synology service hang and Volume 3 config restore	Active follow-up	Synology DSM, Docker, Plex, observability, Volume 1 Btrfs	DSM web/SSH/Plex became unreachable or hung; forced shutdown/reboot was required; deep-dive shows DSM backend timeouts and persistent known Volume 1 Btrfs metadata errors but no clear RAID degradation, OOM, or SATA reset storm	`incidents/2026-05-30-synology-service-hang-volume3-restore/SUMMARY.md`, `incidents/2026-05-30-synology-service-hang-volume3-restore/DEEP_DIVE_FINDINGS.md`	Keep deep-dive evidence until Synology support/rebuild decision
2026-05-26 Plex `ravick4` House of David audio hypothesis	Monitoring	Plex / remote streaming	Remote Apple TV playback looked more stable when Plex converted the stream instead of direct-playing original quality	`incidents/2026-05-26-plex-ravick4-house-of-david-audio/SUMMARY.md`	2026-06-25
2026-05-25 Plex remote buffering for `ravick4`	Monitoring	Plex / remote streaming	Remote Apple TV buffered above low bitrate; 4 Mbps 720p later appeared stable	`incidents/2026-05-25-plex-ravick4-buffering/SUMMARY.md`	2026-06-24
2026-05-20 Volume 1 Btrfs scrub corruption findings	Follow-up	Synology storage / Btrfs	Scrub found historical checksum errors; known corrupt file was removed/replaced	`incidents/2026-05-20-volume1-btrfs-scrub/SUMMARY.md`	2026-11-21
2026-05-18 Tdarr transcode and health-check failures	Resolved for current rollout	Tdarr / media processing	Early Kids TV/Kids Movies failures required controlled retesting and plugin/profile adjustments	`incidents/2026-05-18-tdarr-failures/SUMMARY.md`	2026-06-24
2026-05-17 Docker project migration fallback	Resolved / pending cleanup	Synology Docker	Moving media stack appdata to SSD caused operational issues; stack fell back to Volume 1	`incidents/2026-05-17-docker-volume2-fallback/SUMMARY.md`	2026-08-23
2026-05-25 Observability disk busy alert	Monitoring	Synology storage / Grafana alerts	Disk-busy Discord alert fired during media/Tdarr activity; later cleared	`incidents/2026-05-25-disk-busy-alert/SUMMARY.md`	2026-06-24