# Ports Registry — NAS Synology DS920+ # Derniere mise a jour : 08 juin 2026 # LIRE CE FICHIER AVANT TOUT NOUVEAU DEPLOIEMENT # Mettre a jour apres chaque ajout/suppression de service --- ## Regle absolue Aucun nouveau service ne doit utiliser un port deja occupe. Choisir un port libre et l'inscrire ici avant de deployer. --- ## Hermes Platform | Port | Service | Reseau | Exposition | |------|--------------------------|---------|---------------| | 3010 | hermes-workspace-tt | n8n | 0.0.0.0 | | 3020 | hermes-workspace-nyora | n8n | 0.0.0.0 | | 3021 | hermes-nyora-webui | n8n | 0.0.0.0 | | 3030 | hermes-workspace-perso | n8n | 0.0.0.0 | | 8650 | hermes-agent-tt | n8n | interne Docker uniquement — non publie (gateway 8642 interne) | | 8660 | hermes-agent-nyora | n8n | interne Docker uniquement — non publie (gateway 8642 interne) | | 8670 | hermes-agent-perso | n8n | interne Docker uniquement — non publie (gateway 8642 interne) | Ports reserves pour extensions futures Hermes : - 3011 hermes-tt-webui (futur) - 3031 hermes-perso-webui (futur) > Maintenance Hermes : apres CHAQUE mise a jour des images, executer > `/usr/local/bin/docker image prune -f` (les builds `:latest` quotidiens > empilent des images `` de ~3.3GB). Et `scripts/cleanup-backups.sh` > pour la rotation des data.bak (garde les 2 derniers jeux). --- ## Stack Documentaire | Port | Service | Reseau | Exposition | |------|--------------------------|---------|---------------| | 3001 | gotenberg | n8n | 0.0.0.0 | | 3002 | pandoc | n8n | 0.0.0.0 | | 3003 | docx-generator | n8n | 127.0.0.1 | | 3005 | rla-api | n8n | 0.0.0.0 | | 3015 | document-factory | n8n | 0.0.0.0 | | 4000 | carbone | n8n | 0.0.0.0 | | 5099 | reglement-definitif-api | n8n | 0.0.0.0 | | 8002 | document-factory-api | n8n | 0.0.0.0 | | 8015 | pptx-tt-api | n8n | 0.0.0.0 | | 8090 | prompt-studio | n8n | 0.0.0.0 | | 9998 | tika | n8n | 0.0.0.0 | --- ## TTS | Port | Service | Reseau | Exposition | |------|--------------------------|---------|---------------| | 5500 | piper-tts (fr) | n8n | 0.0.0.0 | | 5501 | edge-tts (ar) | n8n | 0.0.0.0 | --- ## Applications | Port | Service | Reseau | Exposition | |-------|--------------------------|---------|---------------| | 3013 | rayhan-frontend | bridge | 0.0.0.0 | | 3042 | linux-mcp-nas | n8n | 0.0.0.0 | | 3232 | gitea | bridge | 0.0.0.0 | | 3333 | familyspace-app | bridge | 0.0.0.0 | | 3888 | Baserow | n8n | 0.0.0.0 | | 4292 | Trilium | n8n | 0.0.0.0 | | 4501 | Obsidian-Remote | bridge | 0.0.0.0 | | 5678 | n8n | n8n | 0.0.0.0 | | 6090 | Pingvin-Share | bridge | 0.0.0.0 | | 8021 | paperless | n8n | 127.0.0.1 | | 8085 | dashboard-terrain | n8n | 0.0.0.0 | | 8787 | nyora-notes | n8n | 0.0.0.0 | | 9000 | portainer | bridge | 0.0.0.0 | | 9443 | portainer (https) | bridge | 0.0.0.0 | | 51820 | wg-easy (WireGuard) | host | 0.0.0.0 - UDP | | 51821 | wg-easy UI | host | 0.0.0.0 | | 27123 | Obsidian-Remote sync | bridge | 0.0.0.0 | | 27124 | Obsidian-Remote sync | bridge | 0.0.0.0 | --- ## Media | Port | Service | Reseau | Exposition | |-------|--------------------------|--------------------|---------------| | 6881 | qbittorrent | media-stack_default| 0.0.0.0 | | 7878 | radarr | media-stack_default| 0.0.0.0 | | 8191 | flaresolverr | media-stack_default| 0.0.0.0 | | 8989 | sonarr | media-stack_default| 0.0.0.0 | | 9696 | prowlarr | media-stack_default| 0.0.0.0 | | 9866 | qbittorrent UI | media-stack_default| 0.0.0.0 | | 32400 | Plex | media-stack_default| local | --- ## Bases de donnees (internes uniquement) | Port | Service | Exposition | |-------|--------------------------|---------------| | 5432 | postgres (multiple DBs) | 127.0.0.1 | | 6379 | redis (multiple) | local | | 3306 | mysql rayhan | local | --- ## DSM Systeme | Port | Service | Exposition | |-------|--------------------------|---------------| | 80 | DSM HTTP | 0.0.0.0 | | 222 | DSM SSH alternatif | 0.0.0.0 | | 443 | DSM HTTPS | 0.0.0.0 | | 2222 | Gitea SSH | 0.0.0.0 | | 6690 | DSM Cloud Sync | 0.0.0.0 | | 8080 | DSM / watchtower | 0.0.0.0 | | 8585 | DSM service interne | 0.0.0.0 | | 11111 | DSM service interne | 0.0.0.0 | | 22222 | NAS SSH (port principal) | 0.0.0.0 | --- ## Plages libres recommandees pour nouveaux services | Plage | Usage suggere | |-------------|--------------------------------------| | 3040-3099 | Extensions Hermes / nouveaux agents | | 3085 | Bifrost AI Gateway | 0.0.0.0 | | 3100-3199 | APIs internes | | 8800-8899 | UIs web supplementaires | | 8900-8999 | Services experimentaux | --- ## Ports a ne JAMAIS utiliser (conflits confirmes) - 8787 : nyora-notes (conflit hermes-webui par defaut) - 3000 : port interne Docker (ne pas exposer) - 5432 : postgres (interne uniquement) - 22 : SSH DSM interne (utiliser 22222) --- ## Historique des modifications | Date | Action | Port | Service | |------------|-------------------------------------|-------|----------------------| | 2026-05-28 | Creation initiale du registre | — | — | | 2026-05-28 | Reservation port nyora-webui | 3021 | hermes-nyora-webui | | 2026-05-28 | Deploiement hermes-nyora-webui | 3021 | hermes-nyora-webui | | 2026-06-05 | Migration MCP VPN→NAS | 3042 | linux-mcp-nas | | 2026-06-05 | Migration WireGuard VPN→NAS (host) | 51820 | wg-easy | | 2026-06-05 | Migration WireGuard UI VPN→NAS | 51821 | wg-easy UI | | 2026-06-08 | Deploiement dashboard-terrain | 8085 | dashboard-terrain | | 2026-06-09 | Deploiement Open WebUI | 3091 | open-webui | | 2026-06-09 | Deploiement hermes-dashboard | 3092 | hermes-dashboard (Mission Control) | ## nyora-veille (ajouté 2026-06-11) | Port | Service | Container | Description | |------|---------|-----------|-------------| | 3055 | veille-frontend | veille-frontend | TanStack Start SPA + nginx proxy | | 8000 | veille-backend | veille-backend | FastAPI interne réseau n8n uniquement | Domaine : veille.bolbol.tn → NAS:3055