Synology Config Backups

This folder holds local read-only snapshots of Synology configuration that would be useful during rebuild, migration, or troubleshooting.

Backups are timestamped. Start with the newest snapshot's MANIFEST.md.

Current snapshot:

• 20260516-2100

Keep this folder private. It should not contain SSH private keys or account password files, but it can still reveal internal service names, share names, package inventory, reverse proxy paths, and other infrastructure details.

Repeatable Read-Only Health Capture

For protected disk-health details, use the narrow Synology helper installer:

powershell -NoProfile -ExecutionPolicy Bypass -File .\tools\synology\Install-ReadOnlyHealthHelper.ps1

This installs one root-owned helper on the Synology:

/usr/local/bin/codex-readonly-health

It also adds one narrow sudoers rule allowing codex-maint to run only that helper without a password. The helper collects read-only RAID, Btrfs scrub, SMART, NFS export, UPS, and scheduler reference data into the codex-maint home folder.

After the one-time install, refresh the local copy with:

powershell -NoProfile -ExecutionPolicy Bypass -File .\synology\system\Capture-ReadOnlyHealth.ps1