Skip to content

TrueNAS apps & Docker

Docker apps on TrueNAS: Jellyfin, Navidrome, qBittorrent, *arr, Homepage, cloudflared, Authentik, Vaultwarden, NPM, and more.

42 entries — IDs DKR-001 through DKR-042.

DKR-001: Jellyfin app shows Stopped

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Container crashed, update pending, or mount path wrong. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Jellyfin tile red in TrueNAS Apps; site unreachable. Likely cause: Container crashed, update pending, or mount path wrong. Fix: 1. Apps → Installed → Jellyfin → Start. 2. Open Logs — look for permission or path errors. 3. Confirm media dataset still mounted. 4. Restart if needed after pool issues resolved.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Server Restart Docker App Deep dive: Restart Docker app

DKR-002: Navidrome won't start after reboot

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: App did not auto-start or config volume missing. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Music site down; container exited. Likely cause: App did not auto-start or config volume missing. Fix: 1. Start Navidrome from Apps. 2. Check logs for database path errors. 3. Verify music library mount. 4. Enable start on boot if option exists.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Using Navidrome For Beginners Deep dive: Restart Docker app

DKR-003: qBittorrent container crash loop

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Bad config, port conflict, or download path unavailable. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: App restarting repeatedly in TrueNAS. Likely cause: Bad config, port conflict, or download path unavailable. Fix: 1. Stop container. 2. Check download folder exists on pool. 3. Review logs for port 8080 or VPN bind errors. 4. Start after fixing path.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Using Qbittorrent Dont Touch Deep dive: Restart Docker app

DKR-004: Sonarr/Radarr Deploy failed

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Chart version, resource limit, or storage class issue. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Install or upgrade shows Deploy failed. Likely cause: Chart version, resource limit, or storage class issue. Fix: 1. Read deploy log in Apps UI. 2. Retry with previous chart version. 3. Confirm pool has free space for app volume. 4. Check CPU/RAM limits not set too low.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Server Restart Docker App Deep dive: Restart Docker app

DKR-005: Homepage dashboard blank

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Homepage container down or config YAML error. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: dash.saxobroko.com loads empty or errors. Likely cause: Homepage container down or config YAML error. Fix: 1. Restart Homepage app. 2. Check config volume for YAML syntax. 3. Verify cloudflared route to Homepage port.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Using Homepage For Beginners Deep dive: Restart Docker app

DKR-006: cloudflared tunnel offline

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: cloudflared container stopped or token expired. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: All .saxobroko.com sites unreachable externally. Likely cause: cloudflared container stopped or token expired. Fix:* 1. Apps → cloudflared → Start. 2. Check logs for authentication errors. 3. Verify tunnel token in Vaultwarden. 4. LAN sites may still work.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Home Restart Cloudflared Deep dive: Restart Docker app

DKR-007: Authentik login page 502

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Authentik or PostgreSQL container down. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: auth.saxobroko.com returns bad gateway. Likely cause: Authentik or PostgreSQL container down. Fix: 1. Start Authentik and its database app. 2. Check NPM proxy host points to correct IP:port. 3. Review Authentik logs for migration errors.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? External Authentik Add User Deep dive: Restart Docker app

DKR-008: Vaultwarden unreachable

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Vaultwarden container stopped or wrong domain. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Password manager sync fails. Likely cause: Vaultwarden container stopped or wrong domain. Fix: 1. Restart Vaultwarden app. 2. Check cloudflared and NPM routes. 3. Test LAN URL if configured. 4. Do not recreate container without backup — loses vault.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Access Open Vaultwarden Deep dive: Restart Docker app

DKR-009: NPM (Nginx Proxy Manager) down

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: NPM container stopped or MariaDB backend down. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Reverse proxy sites fail; SSL errors. Likely cause: NPM container stopped or MariaDB backend down. Fix: 1. Start NPM and database containers. 2. Login NPM admin — reset password from Vaultwarden if needed. 3. Verify proxy hosts still listed.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Basics All Important Urls Deep dive: Restart Docker app

DKR-010: Port already in use — app won't bind

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Two apps trying same host port. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Deploy error mentions port 3000, 8080, or 443. Likely cause: Two apps trying same host port. Fix: 1. Apps → check which app holds the port. 2. Change host port in app settings. 3. Update NPM proxy to new port if needed.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Server Restart Docker App Deep dive: Restart Docker app

DKR-011: App update rolled back automatically

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: New chart failed health check. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: TrueNAS reverted app to old version. Likely cause: New chart failed health check. Fix: 1. Read update logs. 2. Fix underlying issue (mount, env var). 3. Retry update. 4. Stay on working version until fixed.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Server Restart Docker App Deep dive: Restart Docker app

DKR-012: Docker host path permission denied

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Container user cannot read dataset ACL. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: App logs: permission denied on /mnt/... Likely cause: Container user cannot read dataset ACL. Fix: 1. Check dataset ACL allows apps user. 2. Match PUID/PGID in app settings to Saxon's standard. 3. Restart app after ACL fix.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Basics What Is Docker Deep dive: Restart Docker app

DKR-013: Prowlarr cannot reach Sonarr

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Wrong internal URL or container network. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: arr stack apps don't talk to each other. Likely cause: Wrong internal URL or container network. Fix: 1. Use TrueNAS app internal hostnames or LAN IP. 2. Settings in each arr → use http://192.168.2.203:PORT. 3. Restart both apps after URL fix.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Server Restart Docker App Deep dive: Restart Docker app

DKR-014: Overseerr stuck on loading

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Cannot reach Jellyfin or Radarr API. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Request site spins forever. Likely cause: Cannot reach Jellyfin or Radarr API. Fix: 1. Restart Overseerr. 2. Verify API keys in Overseerr settings. 3. Confirm Jellyfin and Radarr are running.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Using Overseerr Request Movie Deep dive: Restart Docker app

DKR-015: Photos app container won't start

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Database volume corrupt or mount missing. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: photos.saxobroko.com down. Likely cause: Database volume corrupt or mount missing. Fix: 1. Check app logs. 2. Confirm photos dataset mounted. 3. Do not delete volume without backup.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Using Photos Basics Deep dive: Restart Docker app

DKR-016: App using too much RAM — NAS sluggish

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Multiple transcodes or arr jobs at once. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both* — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Whole system slow; apps OOM killed. Likely cause: Multiple transcodes or arr jobs at once. Fix:* 1. Stop non-critical apps temporarily. 2. Limit Jellyfin transcodes. 3. Add RAM limits in app settings if available.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Home When Media Wont Play Deep dive: Restart Docker app

DKR-017: Cannot pull new Docker image

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: No internet, DNS failure, or registry down. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Update fails: image pull error. Likely cause: No internet, DNS failure, or registry down. Fix: 1. Test NAS internet in TrueNAS network settings. 2. Retry later. 3. Check DNS FAQ if only external pulls fail.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Home When Internet Broken Deep dive: Restart Docker app

DKR-018: App configured but Wrong chart

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Wrong catalog entry selected. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Installed community chart instead of official. Likely cause: Wrong catalog entry selected. Fix: 1. Uninstall only if data volume preserved. 2. Reinstall correct chart pointing to same host path. 3. Export config first.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Basics What Is Docker Deep dive: Restart Docker app

DKR-019: Environment variable broke app

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Typo in API key, URL, or path. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Changed env var — app won't start. Likely cause: Typo in API key, URL, or path. Fix: 1. Revert to last working env in app edit. 2. Compare with Vaultwarden saved config. 3. Restart container.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Server Restart Docker App Deep dive: Restart Docker app

DKR-020: GPU transcoding not working in Jellyfin

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Intel Quick Sync not passed through to container. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: All streams transcode on CPU; fans loud. Likely cause: Intel Quick Sync not passed through to container. Fix: 1. Check Jellyfin hardware acceleration settings. 2. TrueNAS may need device passthrough configured. 3. Software transcode still works — slower.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Using Jellyfin For Beginners Deep dive: Restart Docker app

DKR-021: Lidarr missing after TrueNAS update

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: App catalog migration removed chart. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Music automation app gone from Installed list. Likely cause: App catalog migration removed chart. Fix: 1. Reinstall Lidarr with same host paths. 2. Restore config from snapshot if available. 3. Point to existing music folders.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Server Restart Docker App Deep dive: Restart Docker app

DKR-022: Readarr/other *arr not in Apps list

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Not installed — only core arr deployed. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both* — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Cannot find optional arr app. Likely cause: Not installed — only core arr deployed. Fix: 1. Install from Apps catalog if needed. 2. Many use Sonarr/Radarr/Prowlarr only. 3. Check Saxon's services doc for intended stack.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Basics What Is Docker Deep dive: Restart Docker app

DKR-023: Init container never completes

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Database migration on large DB or lock. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Deploy hangs on init or migration step. Likely cause: Database migration on large DB or lock. Fix: 1. Wait 30+ minutes for first start. 2. Check logs — do not force delete volume. 3. If stuck 24h+, seek help with logs.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Server Restart Docker App Deep dive: Restart Docker app

DKR-024: App logs full disk on config volume

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Debug logging left on. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Small app dataset grew huge from logs. Likely cause: Debug logging left on. Fix: 1. Clear or truncate logs inside container if safe. 2. Disable debug in app settings. 3. Set log rotation if app supports it.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Server Check Disk Space Deep dive: Restart Docker app

DKR-025: Timezone wrong in app schedules

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Container TZ env not set. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: arr runs hours off schedule. Likely cause: Container TZ env not set. Fix:* 1. Edit app → add TZ=Australia/... (Saxon's timezone). 2. Restart app. 3. Verify next run time in UI.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Server Restart Docker App Deep dive: Restart Docker app

DKR-026: Duplicate app install by mistake

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Installed twice with different names. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Two Jellyfin instances fighting for port. Likely cause: Installed twice with different names. Fix: 1. Stop and remove duplicate — keep one with data. 2. Confirm NPM points to surviving instance. 3. Never delete both volumes.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Server Restart Docker App Deep dive: Restart Docker app

DKR-027: App network isolation — cannot reach LAN

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Custom Docker network blocks LAN. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Container cannot reach Windows PC or printer. Likely cause: Custom Docker network blocks LAN. Fix: 1. Use default bridge or host networking per chart docs. 2. Use 192.168.2.x URLs not localhost from other containers.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Basics Home Network Simple Deep dive: Restart Docker app

DKR-028: Helm release stuck deleting

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Finalizer or volume still in use. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: App uninstall hung for hours. Likely cause: Finalizer or volume still in use. Fix: 1. Stop other apps using same volume. 2. Force delete only as last resort — risk orphaned data. 3. Reboot NAS once if UI frozen.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Server Restart Docker App Deep dive: Restart Docker app

DKR-029: Catalog apps list empty

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Catalog sync failed or no internet. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Cannot browse Apps to install. Likely cause: Catalog sync failed or no internet. Fix: 1. Apps → Manage → refresh catalogs. 2. Check DNS and internet. 3. Reboot TrueNAS if catalog service down.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Home Truenas Basics Deep dive: Restart Docker app

DKR-030: ix-volume full for app

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: App data grew (database, cache). Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: TrueNAS reports ix-volume near capacity. Likely cause: App data grew (database, cache). Fix: 1. Identify app in Storage. 2. Clean old media metadata or logs. 3. Expand volume or move to larger dataset.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Server Check Disk Space Deep dive: Restart Docker app

DKR-031: Jellyfin library empty after app restart

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Library path wrong after reinstall. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: No shows or movies visible. Likely cause: Library path wrong after reinstall. Fix: 1. Settings → Libraries → verify /media or mount path. 2. Rescan library. 3. Confirm SMB/media dataset still has files on A:.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Using Jellyfin For Beginners Deep dive: Restart Docker app

DKR-032: qBittorrent login forgotten

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Default creds changed; stored in Vaultwarden. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Web UI asks password you don't know. Likely cause: Default creds changed; stored in Vaultwarden. Fix: 1. Check Vaultwarden for qBittorrent entry. 2. Reset via config file in app volume if documented. 3. Do not expose qBittorrent to public internet.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Using Qbittorrent Dont Touch Deep dive: Restart Docker app

DKR-033: Authentik outpost not syncing

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Outpost container disconnected. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Apps bypass SSO or login loops. Likely cause: Outpost container disconnected. Fix: 1. Restart Authentik worker/outpost. 2. Verify provider URLs in Authentik admin. 3. Check NPM forward headers.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? External Authentik Add User Deep dive: Restart Docker app

DKR-034: Cloudflare tunnel points to wrong port

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: NPM or tunnel config drift. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Site loads wrong app or connection refused. Likely cause: NPM or tunnel config drift. Fix: 1. Compare tunnel ingress serverName to NPM proxy. 2. Update cloudflared config or NPM port. 3. Restart cloudflared.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Home Restart Cloudflared Deep dive: Restart Docker app

DKR-035: App auto-update broke production

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Auto-update enabled on chart. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Morning surprise — app on broken version. Likely cause: Auto-update enabled on chart. Fix: 1. Roll back to previous chart version. 2. Disable auto-update for critical apps. 3. Test updates on non-critical app first.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Server Restart Docker App Deep dive: Restart Docker app

DKR-036: Cannot access app Web UI on LAN port

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: App binds localhost only or firewall. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: http://192.168.2.203:PORT refused. Likely cause: App binds localhost only or firewall. Fix: 1. Edit app → enable Web UI on LAN interface. 2. Check TrueNAS firewall if enabled. 3. Use NPM hostname instead of raw port.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Basics All Important Urls Deep dive: Restart Docker app

DKR-037: PostgreSQL for Authentik corrupt

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Unclean shutdown or full disk. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Authentik DB errors on start. Likely cause: Unclean shutdown or full disk. Fix: 1. Restore DB from snapshot backup if exists. 2. Check Authentik postgres volume space. 3. Last resort: rebuild Authentik — reconfigure providers.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? External Authentik Add User Deep dive: Restart Docker app

DKR-038: Redis/cache container for app down

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Dependent cache app stopped. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Session errors in Authentik or similar. Likely cause: Dependent cache app stopped. Fix: 1. Start redis/cache sidecar if separate app. 2. Restart main app after cache up.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Server Restart Docker App Deep dive: Restart Docker app

DKR-039: Immich/Photos DB migration failed

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Major version DB schema change. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Photos app update error. Likely cause: Major version DB schema change. Fix: 1. Read app release notes. 2. Run documented migration command. 3. Backup photos dataset before retry.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Using Photos Basics Deep dive: Restart Docker app

DKR-040: Too many apps — NAS boot slow

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Heavy app count on DXP 8800 Plus. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: 10+ minutes until all apps healthy. Likely cause: Heavy app count on DXP 8800 Plus. Fix: 1. Disable start-on-boot for non-essential apps. 2. Stagger critical: cloudflared, NPM, Authentik first. 3. Accept longer boot — do not delete apps blindly.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Home Turn Everything On Deep dive: Restart Docker app

DKR-041: Ryan needs app restart cheat sheet

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Multiple Docker apps with dependencies. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Inherited homelab — which apps to restart when. Likely cause: Multiple Docker apps with dependencies. Fix: 1. Order: pool healthy → NPM → cloudflared → Authentik → media apps. 2. Use Homepage tiles for status. 3. See restart Docker app guide.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Handover Who Gets What Deep dive: Restart Docker app

DKR-042: All apps down but TrueNAS UI works

Stack context: TrueNAS Apps · Docker (Jellyfin, arr, Authentik, …) Integrated runbooks:* Service matrix · services

Why this happens: Docker service failed or pool mount issue. Diagnose (2 min): 1. Confirm whether the problem is LAN-only, public URL, or both — see Outage runbook. 2. Check Service matrix for which app/host owns the broken URL. 3. If a single device only, retry from a second device on the same network.

Symptoms: Every app Stopped; UI fine. Likely cause: Docker service failed or pool mount issue. Fix: 1. System → Services → start Docker/k3s if stopped. 2. Check pool is ONLINE. 3. Reboot once. 4. Restart apps in dependency order.

Verify: Repeat the original symptom check — it should be gone or clearly improved.

Still broken? Server Restart Docker App Deep dive: Restart Docker app