nas-compose/docs/bootstrap.md

Bootstrap

Environment variables

• SERVICES_DIR: Absolute path to the services folder

Docker

alpine/socat exposes the docker socket as a port.

🌐 Ports

• 2375 TCP: Docker API

📂 Volumes

• /var/run/docker.sock: Socket file from host mounted as it to be exposed.

📒 Documentation

• socat manual

Traefik

traefik is a reverse proxy for docker services.

🌐 Ports

• 80 TCP: HTTP access. Should always redirect to HTTPs
• 443 TCP: HTTPs access

📂 Volumes

• traefik_dynamic_config: Folder containing the dynamic configuration for File provider. See traefik documentation.

📝 Configs

• traefik_config: Static configuration from File provider. See traefik documentation.

🔒 Secrets

• traefik_password: Basic Auth username/password to access Traefik. Encoded using htpasswd (or equivalent), use BCrypt at least.
• traefik_tls_cert: Self-signed certificate for Traefik. Particularly useful in development to avoid generating new certificates on each restart.
• traefik_tls_key: Self-signed private key for Traefik. Used with traefik_tls_cert.

📒 Documentation

• Traefik official documentation

Portainer

portainer/portainer-ce is a docker instance manager. Useful to manage the stacks/docker-compose configuration for the NAS.

Set up to use the port exposed via the Docker container. It displays information about all docker resources available on the host.
It excludes all resources with the tag nas-compose.boostrap: true.

🌐 Ports

• 9443 TCP: HTTPs (self-signed) access to the web interface

📂 Volumes

• ⚠️ portainer_data: All configuration and application data related to portainer. It contains sensitive files

🔒 Secrets

• portainer_password: Admin default admin's password

📒 Documentation

• Portainer official documentation