Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

Turn a mini PC into a household file server by attaching storage that the hardware actually supports, installing a server operating system, publishing a protected Samba share, and maintaining independent backups. An Ubuntu Server installation with Samba is a practical path for homes that include Windows, macOS, and Linux devices. A NAS-focused platform such as TrueNAS is another option when the mini PC has suitable memory, boot storage, and multiple data drives.

The mini PC is only the computer. Your files remain available to other devices because file-sharing software presents a directory over your local network. The share is not automatically secure, redundant, or backed up: those are separate design decisions you must make.

What the finished server should do

A useful home file server has four distinct layers:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Compute: the mini PC runs continuously and provides network services.
  • Data storage: internal drives or an attached enclosure hold the working files.
  • File sharing: Samba publishes selected directories to household clients using accounts and permissions.
  • Protection: firewall rules, updates, redundancy where appropriate, and independent backups limit the damage from mistakes, failures, theft, or malware.

Keep these layers separate in your planning. A mirrored pool can continue after a particular drive fails, but it does not protect against accidental deletion. A second disk connected to the same mini PC is convenient, but it can be lost with the server in the same burglary, flood, or electrical event.

#1 Best Overall
Seagate IronWolf 4TB NAS Internal Hard Drive CMR 3.5 Inch SATA 6Gb/s 5400 RPM 64MB Cache for RAID Network Attached Storage Rescue Services (ST4000VNZ06/006)
  • IronWolf internal hard drives are the ideal solution for up to 8-bay, multi-user NAS environments craving powerhouse performance
  • Store more and work faster with a NAS-optimized hard drive providing ultra-high capacity up to 16TB and cache of up to 256MB
  • Purpose built for NAS enclosures, IronWolf delivers less wear and tear, little to no noise/vibration, no lags or down time, increased file-sharing performance, and much more
  • Easily monitor the health of drives using the integrated IronWolf Health Management system and enjoy long-term reliability with 1M hours MTBF
  • Three-year limited warranty protection plan included and three year Rescue Data Recovery Services included

Check the mini PC before buying drives

Look up the exact model, revision, and firmware documentation. Two mini PCs with similar names can have different drive bays, connector layouts, power limits, and boot support. Record the following before choosing an operating system or storage:

  • Available internal bays: 2.5-inch SATA, M.2 SATA, M.2 NVMe, or none.
  • The number and type of free USB ports, including whether a USB-C port supports high-speed data rather than charging only.
  • Whether an M.2 slot accepts the drive type you intend to buy; an NVMe module cannot be installed in a SATA-only slot.
  • Maximum supported drive thickness, cable requirements, and any proprietary caddy.
  • Power-supply capacity and whether it can run the mini PC plus an attached enclosure continuously.
  • Cooling clearance, fan behavior, and the noise you can tolerate in the room where the server will run.
  • BIOS or UEFI options for booting from the intended internal device or a separately attached boot drive.
  • Supported memory capacity and the memory already installed.

Do not assume that a free-looking connector is usable for storage, that every USB-C port has the same speed, or that the computer can boot from every external device. Confirm each item in the manufacturer’s specification and service documentation.

Internal SATA or NVMe storage

An internal drive is compact and avoids another power adapter and cable. It is usually the simplest choice when the mini PC has a proper bay or slot and you need one data device. Capacity is limited by the available bays, the drive sizes the firmware supports, and the cooling available inside the chassis. Internal storage also makes replacement or expansion dependent on opening the computer.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

USB-connected multi-drive enclosure

If the mini PC has no suitable internal bay, a USB-C direct-attached storage (DAS) enclosure can add several drives. A TerraMaster mini-PC guide describes this as an expansion path and notes that multiple drives can add heat and noise during heavy activity. Treat that as vendor guidance, not as an independent compatibility test. Check the enclosure’s USB mode, power supply, drive-size limits, cooling, and whether it exposes disks individually or manages them as a hardware volume.

A USB DAS can be sensible for a home share, but do not treat every USB enclosure as equivalent to direct-attached internal storage. A loose cable, enclosure power failure, USB bridge problem, or sleep setting can make every disk disappear at once. Use a stable connection and test the exact enclosure with the mini PC before moving irreplaceable data.

TrueNAS-specific baseline

If you choose TrueNAS, its current hardware guidance calls for an x86_64-compatible processor, 8 GB of memory, a 20 GB SSD boot device, and two identically sized devices for one storage pool. These are TrueNAS platform recommendations, not universal minimums for every Linux file server or workload. The guide recommends storage-class drives for systems and says USB hard disks can be used for basic backup purposes; it does not make USB disks a universal choice for a primary pool.

Confirm that the mini PC can meet those requirements before selecting TrueNAS. A machine that is perfectly adequate for a single-disk Samba share may not provide enough memory, boot devices, drive bays, or reliable disk connectivity for the storage layout you want.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Choose a storage layout deliberately

Choice What it provides Advantages Limitations
One internal drive One working copy on a SATA or NVMe device Lowest complexity, lowest power use, and no enclosure required A drive failure makes the live files unavailable until you restore them; capacity and expansion depend on the single slot
Several drives in a USB DAS Additional capacity or multiple devices outside the mini PC Useful when internal bays are absent; easier to add drives without replacing the computer Requires enclosure power and cooling; USB connectivity and bridge behavior become additional failure points; heat and noise can increase
Mirrored storage pool Redundant copies across the member drives Can tolerate the failure of a particular drive, depending on the platform and layout Usable capacity is lower than the sum of the drives and management is more complex; it is not a backup
Other redundant pool layouts Platform-specific combinations of capacity and fault tolerance May use more of the raw capacity or tolerate different failures Drive-count requirements, rebuild behavior, and failure tolerance depend on the selected platform; follow its current documentation

For a first server, a single reliable data drive plus a tested, separate backup is often easier to operate than an elaborate pool. Choose redundancy when continuous availability or faster recovery from a drive failure justifies the extra drives and administration. In every layout, keep an independent copy.

Install an operating system

An Ubuntu Server installation with Samba is an approachable general-purpose route. It works well when Windows clients are part of the household because Samba implements the SMB protocol those clients use. A NAS-focused platform can provide a more guided storage interface, but it has its own hardware requirements and boot process. Do not assume that every mini PC supports every storage operating system.

Prepare the installer and boot device

  1. Download the current server installer from the operating system’s official site on a separate computer.
  2. Write it to a USB installer with a trusted imaging utility. The installer USB is not your data disk.
  3. Back up anything already on the mini PC. Installing can erase its existing system.
  4. Enter the mini PC’s UEFI setup, select the installer as the temporary boot device, and verify that the intended boot mode is supported.
  5. During installation, give the server a descriptive hostname, create an administrator account, install OpenSSH if you will administer it remotely, and select the intended boot device carefully.

After the first boot, connect the mini PC to the router with Ethernet if possible. Wired networking is generally more predictable for large transfers than a marginal Wi-Fi link. Give the server a stable address through your router’s DHCP reservation or the network configuration method supported by your installation, then record the address for client connections.

Rank #2
Seagate 8TB BarraCuda Internal Hard Drive | SATA 6 Gb/s (ST8000DM004) | Desktop HDD for everyday PC storage, gaming, & computing. Trusted reliability with 2-Year Warranty + 2-Year Rescue
  • Store more, compute faster, and do it confidently with the proven reliability of BarraCuda internal hard drives
  • Build a power house gaming computer or desktop setup with a variety of capacities and form factors
  • The go to SATA hard drive solution for nearly every PC application from music to video to photo editing to PC gaming. Ax. Sustained transfer rate OD: 190MB/s
  • Confidently rely on internal hard drive technology backed by 20 years of innovation
  • Frustration Free Packaging - This is just an anti-static bag. No cables, no box.

Create a dedicated data directory

Keep shared files in a clearly identified data location rather than inside a user’s home directory. Ubuntu’s Samba documentation illustrates a share under /srv/samba/; adapt the path to your disks and mount points.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Identify the data disk and create a filesystem using the tools appropriate to your chosen operating system. Formatting destroys existing contents, so verify the device name twice.
  2. Create a mount point and configure the disk to mount consistently at boot. Use the filesystem’s stable identifier rather than relying on a changing device name.
  3. Create the share directory, a group for people who may use it, and ownership that matches your access plan. For example:
sudo groupadd fileshare
sudo mkdir -p /srv/samba/household
sudo chown root:fileshare /srv/samba/household
sudo chmod 2770 /srv/samba/household

The set-group-ID bit in the example helps new files inherit the intended group. Adjust ownership and modes if you need separate read-only and read-write areas. Filesystem permissions are one layer of access control; Samba’s account and share settings are another.

Install and configure Samba on Ubuntu

Install the service

sudo apt update
sudo apt install samba

Save a copy of the original configuration before editing it:

sudo cp /etc/samba/smb.conf /etc/samba/smb.conf.backup

Ubuntu stores Samba’s main configuration at /etc/samba/smb.conf. The exact defaults can change with package updates, so preserve your backup and read the comments in the installed file.

Create Linux accounts and Samba credentials

Linux users are not automatically Samba users. Create or select an ordinary Linux account for each person who needs access, add it to the share group, and then add a Samba password for that account:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
sudo adduser alice
sudo usermod -aG fileshare alice
sudo smbpasswd -a alice

Use a separate account for each person instead of sharing one password. Remove access when someone no longer needs it, and do not use the root account for file sharing.

Add a protected share

Add a share definition to the end of /etc/samba/smb.conf. This example grants access to members of the fileshare group and does not enable guest access:

[Household]
   path = /srv/samba/household
   browseable = yes
   read only = no
   valid users = @fileshare
   force group = fileshare
   create mask = 0660
   directory mask = 0770

Check the configuration before restarting the service:

testparm

Fix every reported error. Then restart Samba and arrange for it to start automatically:

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
sudo systemctl restart smbd
sudo systemctl enable smbd

Ubuntu’s simple introductory example allows clients on the local network to connect without a password. That is useful for demonstrating the software, but it is an unsafe default for household documents, photographs, or backups. Use named accounts and explicit access lists unless you have a specific, well-understood reason to permit guests. A guest share can also be combined accidentally with permissive filesystem modes, allowing more access than intended.

Rank #3
Seagate 8TB IronWolf Internal NAS Hard Drive | SATA 6 Gb/s (ST8000VNZ04) | 24/7 NAS-optimized HDD. AgileArray, All-CMR, RV sensors for multi-bay, 180TB/year. 3-Year Warranty + 3-Year Rescue
  • IronWolf internal hard drives are the ideal solution for up to 8-bay, multi-user NAS environments craving powerhouse performance.date transfer rate:6.0 gigabits_per_second
  • Store more and work faster with a NAS-optimized hard drive providing 8TB and cache of up to 256MB
  • Purpose built for NAS enclosures, IronWolf delivers less wear and tear, little to no noise/vibration, no lags or down time, increased file-sharing performance, and much more
  • Easily monitor the health of drives using the integrated IronWolf Health Management system and enjoy long-term reliability with 1M hours MTBF
  • Three-year limited product warranty protection plan and three year Rescue Data Recovery Services included

Test locally before involving other devices

  1. Run testparm again after every substantial configuration change.
  2. Confirm that the account can read and create a test file in /srv/samba/household on the server.
  3. Confirm that an account not listed in valid users is refused.
  4. Delete test data only after verifying the behavior you intended.

If a user can authenticate but cannot create files, inspect both layers: the Samba share options and the directory’s Unix owner, group, and mode. A Samba write setting cannot override a filesystem that is read-only or denies the user’s group.

Connect household devices

Windows

In File Explorer’s address bar, enter \server-ipHousehold, replacing server-ip with the mini PC’s address. Sign in with the Samba username and password when prompted. You can map the location as a network drive after confirming that authentication and permissions work.

macOS

In Finder, choose Go then Connect to Server and enter smb://server-ip/Household. Authenticate with the dedicated Samba account. Do not save credentials in a shared family profile if that profile grants more access than the person needs.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Linux

Most desktop file managers can open an SMB location such as smb://server-ip/Household. For command-line testing, install an SMB client package supplied by your distribution and connect with the named account. Keep automated mounts and scripts on accounts with only the permissions they require.

Test a small file from every client type you intend to support. Confirm that a permitted user can create, edit, and delete a test file and that a restricted user cannot browse or modify the share.

Restrict the network and administer the server safely

Keep SMB on the trusted home subnet

File-sharing traffic should stay on the home network. Ubuntu documents a UFW rule that limits Samba to a specified subnet. Replace the example subnet with the actual LAN range used by your router:

sudo ufw allow from 192.168.1.0/24 to any app Samba
sudo ufw enable
sudo ufw status verbose

Check the rule from a device inside the home network and verify that an untrusted network cannot reach the service. If your router uses a different address range, the example rule must be changed; do not copy it unchanged.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Do not expose SMB directly to the internet

Do not create a port-forwarding rule that publishes SMB to the public internet. Remote access requires a separately secured design, such as a properly maintained private-network tunnel, and introduces additional authentication, patching, and routing risks. If you do not need remote access, leave it disabled.

Use least privilege and secure administration

  • Use a non-root administrator account and elevate individual tasks with sudo.
  • Use SSH for remote administration, protect its keys and passwords, and restrict which accounts may log in.
  • Apply operating-system and Samba security updates promptly, then test that the share still works.
  • Disable unused services and remove old Samba accounts.
  • Keep the server’s management interface off guest Wi-Fi if your router provides separate trusted and guest networks.

Ubuntu’s security guidance emphasizes host firewalling, secure SSH administration, least privilege, and security patches. A firewall is not a substitute for correct share permissions, and a strong Samba password does not make an internet-exposed SMB service safe.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Plan backups and restoration separately

A live share is not a backup. Decide what must be recoverable, how often it changes, where another copy will live, and how you will restore it. Ubuntu’s backup guidance recommends documenting the data set, schedule, destination, and restoration procedure, and considers off-site storage good practice for important files.

Rank #4
Western Digital 16TB WD Red Pro NAS Internal Hard Drive HDD - 7200 RPM, SATA 6 Gb/s, CMR, 512 MB Cache, 3.5" - WD161KFGX
  • Available in capacities ranging from 2 to 22TB(1) | (1) 1GB = 1 billion bytes and 1TB = 1 trillion bytes. Actual user capacity may be less depending on operating environment.
  • For RAID-optimized NAS systems with unlimited number of bays
  • Rated for 550TB/yr workload rate(2) | (2) Annualized Workload Rate = TB transferred x (8760 / recorded power-on hours). The maximum rated workload is specified for operating at typical temperature of 40C. Workload Rate will vary depending on your hardware and software components and configurations.
  • Designed to handle the demands of high-intensity 24x7 multi-user NAS environments
  • Western Digital partners with a wide range of NAS system vendors for extensive testing to ensure compatibility with most NAS enclosures

Choose a second destination

An external USB hard drive can be practical backup media. Connect it only when a backup is running, or disconnect and store it separately afterward. A removable disk left permanently beside the server is exposed to the same theft, fire, power event, and malware that could affect the live files.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For particularly important data, keep an additional copy away from the home. The off-site copy can be slower to restore, but it protects against events that destroy both the mini PC and nearby media. Protect the off-site account or device with its own strong authentication and encryption appropriate to the sensitivity of the files.

Set a schedule and retention policy

  • Choose a frequency that matches how much work you can afford to lose: daily for active documents, less often for archival material that rarely changes.
  • Keep more than one recovery point when accidental deletion or corrupted files are possible; a single synchronized copy can reproduce the mistake.
  • Record which folders are included and which are intentionally excluded.
  • Let users know when a backup is running if the removable disk affects performance.

Verify that restoration works

  1. Restore a few files to a temporary directory and open them on a normal client.
  2. Periodically perform a larger test, including file names, permissions, and directory structure.
  3. Record the steps, credentials, mount points, and software needed to rebuild the server.
  4. Replace a failing backup disk before the only remaining copy is at risk.

A backup job that reports success but has never been restored is an assumption, not a recovery plan.

Maintain the server over time

Monitor space and hardware health

Leave free space for filesystem operations and temporary files. Check disk health using tools appropriate to the drive and enclosure, and investigate repeated disconnects, read errors, unusual fan noise, or rising temperatures. USB enclosures may hide individual drive information or report it differently, so consult their documentation.

Review permissions when the household changes

When someone no longer needs access, remove the Samba account or take it out of the share group. Review valid users, filesystem ownership, and any saved credentials on client devices. Keep private folders separate from a broad household share rather than trying to repair access with increasingly permissive modes.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Test after updates and power interruptions

After a kernel, Samba, or storage-platform update, confirm that the data volume mounted, the service started, and a test client can authenticate. If the mini PC is in an area with unreliable power, use suitable power protection and verify that the filesystem and enclosure recover cleanly after an outage.

Troubleshooting by symptom

The share is not visible

  • Confirm the mini PC is powered on and has the expected IP address.
  • Check that Samba is running with systemctl status smbd.
  • Run testparm and correct configuration errors.
  • Check the UFW rule and ensure the client is on the permitted subnet.
  • Connect by IP address instead of relying on network discovery, which can vary by client operating system.

Authentication fails

  • Verify that the username exists as both a Linux account and a Samba account.
  • Reset the Samba password with sudo smbpasswd username if necessary.
  • Remove stale credentials saved by the client and retry.
  • Confirm the user is included in valid users or its permitted group.

The user can read but not write

Check the share’s read only value, then inspect the directory owner, group, and mode. The account must have filesystem write permission as well as Samba permission. Also check whether the data volume mounted read-only after an error.

Transfers stop or disks disappear

Inspect USB cables, enclosure power, and temperatures. Test one drive at a time if possible, review system logs for USB resets or filesystem errors, and avoid placing the enclosure where vents are blocked. Do not continue writing irreplaceable data until the underlying connection is stable.

A practical decision checklist

  • Have you confirmed the exact mini PC model, bays, interfaces, memory, power, cooling, and boot options?
  • Does the selected storage fit internally, or have you validated the USB-C DAS and its power and cooling?
  • Does the operating system match the hardware and your management preference?
  • Is the data directory on the intended disk and mounted consistently at boot?
  • Are Samba accounts named per person, with filesystem and share permissions that agree?
  • Is SMB limited to the trusted home subnet rather than exposed publicly?
  • Are SSH administration, least privilege, and security updates part of normal maintenance?
  • Do you have a separate backup destination, a schedule, an off-site copy when needed, and a restoration test?

With those decisions made explicitly, a mini PC can provide convenient network storage without pretending to be a complete backup system. Start with the simplest layout the hardware supports, secure the share before adding clients, and expand only after you can restore the data reliably.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.