DavRoll setup guide
Synology NAS photo backup: WebDAV/SMB setup and automation limits
Connect DavRoll directly to a DSM WebDAV endpoint or SMB shared folder and keep photo backups on storage you own.
This is an independent guide for DavRoll users, not official Synology
support documentation. Menu names can vary by DSM version and installed
packages.
Current automation scope: Background new-photo
discovery is a separate opt-in and is off by default. When enabled, it
non-interactively checks at most 80 items within the photo access
already granted in the foreground and the saved backup scope. Each new
item is added once to the duplicate-safe queue for every compatible enabled
destination. Timing is best effort and controlled by the operating
system. Existing pending or failed uploads can still run when discovery
is off.
Should I use WebDAV or SMB?
| Method | Recommended environment | DavRoll completion rule |
|---|---|---|
| WebDAV | A NAS with a valid HTTPS certificate, including remote or VPN access | DavRoll reads the uploaded file back and shows Verified only after its SHA-256 matches |
| SMB | A trusted home LAN or VPN | DavRoll confirms upload completion without a separate checksum verification |
1. Prepare a NAS account and destination folder
- Create a non-administrator DSM account dedicated to backup.
- Choose a shared folder or a dedicated folder inside it.
- Grant that account read/write access only to the destination it needs.
- Use File Station to confirm the same account can create a folder and upload a small file.
Synology Photos Personal Space at
/home/Photos is separate
for each signed-in account. Uploading with the dedicated backup account
puts files in that account's Personal Space. To make them available to
your primary account or multiple accounts, enable Shared Space, grant
the backup account upload permission, and target /photo.
2A. Connect with WebDAV over HTTPS
- Install and open WebDAV Server from DSM Package Center.
- In DSM User & Group settings, open the backup account's Applications permissions and confirm that WebDAV Server access is allowed.
- Enable HTTPS under the WebDAV Server HTTP/HTTPS settings. The default HTTPS port is
5006, but it can be changed. - Use a TLS certificate trusted by your phone and matching the hostname. QuickConnect addresses do not support WebDAV, so use a directly reachable domain, DDNS name, or VPN address. DavRoll accepts only
https://WebDAV URLs. - In DavRoll, open Settings → Backup location → Advanced storage → WebDAV.
| DavRoll field | What to enter |
|---|---|
| Server URL | https://<NAS_HOST>:<HTTPS_PORT>/<SHARE>/<BACKUP_FOLDER>/Create the destination share and backup folder first. |
| Username | The dedicated DSM account with read/write access to the destination |
| Password | The password for that DSM account |
Tap Test and save, then run a small backup. A Verified count in the completion summary and upload history means the WebDAV upload and post-upload SHA-256 check both passed.
2B. Connect an SMB shared folder
- In DSM, open Control Panel → File Services → SMB and enable SMB service.
- In DavRoll, open Settings → Backup location → Advanced storage → Samba/SMB.
- Start with SMB version set to Auto. Restrict it to SMB 2.x or 3.x only when your server policy requires that.
| DavRoll field | What to enter |
|---|---|
| Server | <NAS_LAN_IP_OR_HOST> — without a protocol or share name |
| Port | 445 — the SMB port supported by DavRoll |
| Share | <SHARE> — the DSM shared-folder name only |
| Base path | <BACKUP_FOLDER> — the selected path inside the share |
| Domain/workgroup | Enter only when required by your DSM or organization setup |
| Username and password | The credentials for the dedicated DSM backup account |
Do not expose SMB port 445 directly to the public internet. Use a VPN
that connects the NAS and phone for remote access. An SMB success record
means the upload completed; it does not claim SHA-256 verification.
3. Run a first backup and optionally discover new photos
- Tap Test and save for the selected connection, then use Back up now to scan photos and confirm a small manual backup completes.
- Review photo access and the saved backup scope in the foreground, then enable Automatically find new photos only if you want it. It is off by default and never opens a permission prompt from the background.
- Android: Also enable Settings → Automatic backup → Turn on Android automatic backup, then choose mobile-data, charging, and low-battery conditions. When the OS runs the task, DavRoll checks at most 80 items in the saved scope.
- iOS: Work runs when the app launches or resumes, or during background time granted by iOS. iOS decides the exact timing. Automatic discovery is skipped when limited photo access and an album scope are used together; use Back up now in the app in that case.
- Discovered photos are queued once for every compatible enabled destination, including WebDAV and SMB. Checking the same scope again does not create another queue row for the same photo and destination.
Can I open backup files without DavRoll?
SMB backups and WebDAV backups with media encryption off remain regular
files on the destination filesystem and can be accessed without
DavRoll. JPEGs converted with the optional WebDAV JPEG XL setting
require a compatible JPEG XL app, while .droll files made
with WebDAV media encryption must be restored with DavRoll.
Troubleshooting checklist
- Permissions: In File Station, confirm the same account can create a file in the destination.
- WebDAV: Check that WebDAV Server is running, the account has application permission, and the HTTPS port, DNS, hostname, and certificate trust are correct. Do not use a QuickConnect address.
- SMB: Check LAN/VPN reachability, port 445, and that Share and Base path were entered separately.
- SMB version: Confirm the DSM minimum/maximum SMB policy is compatible with the DavRoll selection.
- Synology Photos: If files exist but do not appear, check Personal/Shared Space, upload permissions, and indexing.
- Background timing: Check the discovery opt-in, foreground photo access, saved backup scope, and Android automatic-backup conditions. Scheduling is best effort and each run checks at most 80 of the newest items. After adding or importing more than 80 photos between runs, use Back up now. With iOS limited access plus an album scope, also use Back up now.