All media DELETED! Help me figure out why?

To preface; I am very new to this, linux and OMV in general, but I have done my best to rule out the typical culprits.

rundown / TLDR:

Last night, most of my movies and tv shows in my share were deleted from the drive, I am (was...) watching them on a Jellyfin container in docker installed using omv-extras. I have managed to recover about 10% of the files from the drive but the rest are lost. On the bright side however, I will now never miss a backup again.

I don't think it was Jellyfin and I did not consciously delete the files myself. I noticed sub folders behaving strangely a day prior, being moved into other, seemingly random sub folders without me doing so myself. i.e media/jellyfin/movies/21 Jump Street was moved into the media/jellyfin/movies/AvP folder which itself had been moved into the media/jellyfin/movies/Ant man folder.

After the deletion, all sub folders in media/jellyfin/movies and media/jellyfin/tvshows were present with the same titles, just emptied. Non library folders such as media/jellyfin/profile pics were not touched.

longer / extra info:

[21:03:59] [INF] [39] Emby.Server.Implementations.IO.LibraryMonitor: movies (/jellyfin/jellyfin/movies) will be refreshed.
[21:03:59] [INF] [39] Emby.Server.Implementations.Library.LibraryManager: Removing item, Type: Movie, Name: Blade Runner 2049, Path: /jellyfin/jellyfin/movies/Bladerunner 2049 (2017)/Bladerunner 2049 (2017) - 1.1 Recut Edition.mkv, Id: 7473a806-6c64-eb94-7b82-d6bf720eb696

If anyone's feeling generous, curious or particularly bored I would like some help trying to figure out the cause of this issue so I can avoid it happening again. PLEASE! Especially if it is my own fault. The issue happened somewhere between 20:30-21:30 on the 15th. The syslog.txt was too big to attach to this post, so I have uploaded it to a catbox HERE.

Thank you!

Quote from chente

At the time you have specified I see logs related to the Filebrowser plugin. Maybe you did something from there that could have caused the deletion?

It is very difficult to try to guess without knowing the details of your server, active containers, file systems, services,... In any case, it is not normal for this to happen without you realizing it. I tend to think that you have done something unintentionally that caused it.

RE: Filebrowser, this is a possibility, however the only thing I had done within filebrowser at any point was delete a jellyfin plugin folder (skin manager) that refused to be uninstalled through the normal Jellyfin interface (I believe due to mismatched version numbers in the skin manager plugin itself). Even after this, my files were definitely still on the disk as I was accessing them afterwards. I had deleted the plugin at least an hour prior to this incident occurring. But again, I am very new, I could see myself having done something by mistake at some point.

In fact, I actually caught it mid-deletion though I did not realise what was happening immediately. I could not access the jellyfin movies folder without it telling me the folder was not available in Windows file explorer and had noticed my movies library on jellyfin was now significantly smaller.

At that time the tvshows were still in tact as I rushed over to check those folders and they were fine. Until they weren't a little while later... I was not in the process of using filebrowser at the time. Jellyfin through the Docker plugin and OMV itself are all that I am using.

Quote from raulfg3

do you expose your container to internet?, eg: do you use traefik to expose filebrowser or jellyfin?.

there are tons of filebrowser errors, not clear what do on that cases.

I do not believe I exposed the container to the internet. I am unsure how easy it would be to do that accidentally, but I did not intentionally change any settings in the interest of exposing filebrowser or jellyfin to the internet. As mentioned above, I have since uninstalled the filebrowser plugin. I did suspect it might be an internet exposure issue though, as the folders moving around by themselves was extremely strange. I noticed Kubernetes came preinstalled with Traefik so perhaps it was unintentionally exposed to the internet through that?

Either way, thank you both for taking the time to have a look at this for me, especially on a Monday.

If any more information is desired please let me know. For now I will attempt to be extra careful and continue looking through what I can to figure out where I've gone wrong. Maybe a full reinstall of OMV is in order.