I use a mikrotik RB5009 for my 2.5gb routing. It technically can hit 10gbps via routing.

Switching you can try https://mikrotik.com/product/crs305_1g_4s_in

Mikrotik RB5009 is my router.

Moving to OPNsense

USB inherently has latency issues and protocol overhead. Seems like you’re restricted to hardware unfortunately.

See if seachest is compatible with your drives. I think it’s only compatible with Exos.

Also are you running through USB?

What’s your HDD model?

Try this in your SMB settings in OMV.

socket options = TCP_NODELAY SO_RCVBUF=65536
SO_SNDBUF=65536
read raw = yes
write raw = yes
max xmit = 65535
dead time = 15
min receivefile size = 16384
write cache size = 524288
getwd cache = yes
max connections = 65535
max open files = 65535
min protocol = smb3
max protocol = smb3

What software are you using

I have a hot storage NAS that backups to a warm storage NAS.

I backup every week and scrub every month.

I have 2 x ZFS1 pools that contains 3 x 20TB disks each.

With ECC ram, scrubbing, and independent pools, it’ll take a house fire to kill my local storage.

I also have a constant backing to Backblaze and yearly encrypted backup that I ship to a friend across the world.

Running a lot of DoH and DoT within my devices and my network

This is the exact script I use to install tailscale on my VPN server

Installing Tailscale

 curl -fsSL https://tailscale.com/install.sh | sh 

Enable IP forwarding

 echo 'net.ipv4.ip_forward = 1' | sudo tee -a /etc/sysctl.conf 
 echo 'net.ipv6.conf.all.forwarding = 1' | sudo tee -a /etc/sysctl.conf 
 sudo sysctl -p /etc/sysctl.conf 

Advertise subenets and exit node

 tailscale up --advertise-exit-node --advertise-routes=192.168.0.0/24,192.168.2.0/28,192.168.5.0/24,192.168.10.0/24

https://www.yubico.com/

I use it as my 2nd facor authentication.

Bitwarden with YubiKey

NUCs have an iGPU, you should be fine.

I use OpenMediaVault for my NAS

But if you don’t want to be the IT of your family, I’d just go with an easy solution like WDs my cloud or one drive

Encoding uses the iGPU. The iGPU should usually support 4k 60fps if it’s a recent CPU.

I’ve had this happen when I had ram issues. You can try doing a memory test if you want to take that out of the equation.

I’m assuming they’re plain text. There’s is no perceivable way they can only use those data points to to figure out which hash it is. Unless of course they’re using their own “hashing” function which isn’t secure at all since it’s probably reversible.

I have a vote for Python. It’s like child’s play vs Java.

Adguard home

OpenMediaVault

JellyFin

I only know 2 passwords.

Bitwarden for all of my passwords. No OTP in bitwarden.

Bitwarden admin email’s password is not in bitwarden, it’s the only other password I know.

With all accounts supporting webauth I use yubikeys.

For accounts that don’t support webauth, I use Aegis that’s password secured with a static password on my yubikey so even I don’t know that password.

If I lose all 3 of my yubikeys, them I’m SOL.