Syncthing - works only for 'apps'

[paulhaig]

I am hoping for some guidance, I have been struggling for a few days reviewing available TrueNAS Scale+Syncthing information...
I am unable to have Syncthing sync files created by non 'apps' users.
I suspect something with permissions as I am not a linux guru but a novice.
Setup:
TrueNAS-SCALE-22.12.0
Syncthing v1.23.0

I have dataset /mnt/Pool1/SyncThing-Share used by Syncthing successfully.

• Configured Syncthing
  
  
• Configured /mnt/Pool1/Syncthing dataset permissions (this is where I suspect my issue is)
  
  
  • User - apps
  • Group - apps

Problem:
Syncthing works and syncs files to another server only when the file owner/group is 'apps'
If I create a file in /mnt/Pool1/SyncThing-Share with another user, I receive error:

If I re-apply above ACL (which changes all files to owner = apps, group = apps) then all files will then successully sync via Syncthing...
This is not useful for me as files will be created in the /mnt/Pool1/SyncThing dataset by other users.

Thank you for any help.
Paul.

 

[sretalla]

Seems like the apps user could do with being a member of WindowsUsers at least as a secondary group...

 

[paulhaig]

sretalla,
thank you for suggestion. I did add 'apps' to group "WindowsUsers" but that did not resolve.

 

[sretalla]

I'd recommend having a look over here: https://www.truenas.com/community/threads/bluefin-recommended-settings-and-optimizations.106034/

And in particular in the SMB section.

 

[paulhaig]

sretalla,
Thank you for the suggestion.
That post was helpful.
I realized I was lacking understanding of Linux File Access Control Lists (ACL) and found this tutorial helpful: https://tylersguides.com/guides/linux-acl-permissions-tutorial/
Specifically how 'user default' and 'group default' are used.
I defined my ACL on the root SMB share dataset to create by default a syncthing user and syncthing group on any new file or directory created in the dataset. (I created my own syncthing user and group instead of 'apps'. I expect you could do the same with 'apps')
Now whenever any of my SMB users create a file or directory, syncthing still has access to it as well.