210 lines
12 KiB
Markdown
210 lines
12 KiB
Markdown
# Ports Registry — NAS Synology DS920+
|
|
# Derniere mise a jour : 16 juin 2026
|
|
# LIRE CE FICHIER AVANT TOUT NOUVEAU DEPLOIEMENT
|
|
# Mettre a jour apres chaque ajout/suppression de service
|
|
|
|
---
|
|
|
|
## Regle absolue
|
|
Aucun nouveau service ne doit utiliser un port deja occupe.
|
|
Choisir un port libre et l'inscrire ici avant de deployer.
|
|
|
|
---
|
|
|
|
## SERVICES ACTIFS — Etat au 16 juin 2026
|
|
|
|
Cette section est la source de verite sur ce qui tourne reellement.
|
|
Mise a jour obligatoire a chaque deploiement ET a chaque suppression.
|
|
|
|
| Service | Port | URL / Domaine | Statut | Notes |
|
|
|----------------------|-------|------------------------------|----------|------------------------------------|
|
|
| n8n | 5678 | n8n.bolbol.tn | ACTIF | Orchestration centrale |
|
|
| Baserow | 3888 | baserow.bolbol.tn | ACTIF | Base de donnees metier |
|
|
| Gitea | 3232 | gitea.bolbol.tn | ACTIF | Versioning (compte bolbol) |
|
|
| Portainer | 9000 | portainer.bolbol.tn | ACTIF | Gestion containers |
|
|
| NyoraNotes | 8787 | - | ACTIF | Memoire inter-sessions Hermes |
|
|
| linux-mcp-nas | 3042 | mcp-nas.nd.i234.me | ACTIF | MCP shell NAS |
|
|
| Bifrost | 3085 | bifrost.bolbol.tn | ACTIF | Gateway LLM |
|
|
| bifrost-proxy | 3086 | - | ACTIF | Auth rewrite + cap 16384 tokens |
|
|
| hermes-workspace-tt | 3010 | hermes-tt.bolbol.tn | ACTIF | Hermes TT workspace |
|
|
| hermes-workspace-nyora| 3020 | hermes-nyora.bolbol.tn | ACTIF | Hermes Nyora workspace |
|
|
| hermes-workspace-perso| 3030 | hermes-perso.bolbol.tn | ACTIF | Hermes Perso workspace |
|
|
| hermes-agent-tt | 8650 | interne Docker | ACTIF | Agent TT |
|
|
| hermes-agent-nyora | 8660 | interne Docker | ACTIF | Agent Nyora |
|
|
| hermes-agent-perso | 8670 | interne Docker | ACTIF | Agent Perso |
|
|
| Pandoc | 3002 | - | ACTIF | Stack documentaire MD->DOCX/HTML |
|
|
| Gotenberg | 3001 | - | ACTIF | Stack documentaire HTML->PDF |
|
|
| Carbone | 4000 | - | ACTIF | Templates DOCX/XLSX + JSON |
|
|
| pptx-tt-api | 8015 | - | ACTIF | PPTX charte TT |
|
|
| Tika | 9998 | - | ACTIF | Extraction documents |
|
|
| Paperless | 8021 | paperless.bolbol.tn | ACTIF | GED |
|
|
| Trilium | 4292 | trilium.bolbol.tn | ACTIF | Notes |
|
|
| Pingvin-Share | 6090 | share.bolbol.tn | ACTIF | Partage fichiers |
|
|
| WireGuard (wg-easy) | 51820 | - | ACTIF | VPN UDP |
|
|
| wg-easy UI | 51821 | vpn.bolbol.tn | ACTIF | Interface WireGuard |
|
|
| Family Help | 3041 | help.bolbol.tn | ACTIF | IA familiale FastAPI+SQLite |
|
|
| nyora-veille | 3055 | veille.bolbol.tn | ACTIF | Veille IA vanilla JS/nginx |
|
|
| veille-backend | 8000 | interne Docker | ACTIF | Backend veille FastAPI |
|
|
| gsparc-mezzouna | — | gsparc-mezzouna.bolbol.tn | ACTIF | Gestion carburant fleet |
|
|
| rla-api | 3005 | - | ACTIF | RLA contrats TT |
|
|
| document-factory | 3015 | - | ACTIF | Usine documentaire |
|
|
| Plex | 32400 | - | ACTIF | Media |
|
|
| Radarr | 7878 | - | ACTIF | Media |
|
|
| Sonarr | 8989 | - | ACTIF | Media |
|
|
| Prowlarr | 9696 | - | ACTIF | Media |
|
|
| Open WebUI | 3091 | — | ACTIF |
|
|
| hermes-nyora-webui | 3021 | — | DESINSTALLE 15/06/2026 | Port 3021 LIBRE |
|
|
| hermes-dashboard | 3092 | — | DESINSTALLE 15/06/2026 | Port 3092 LIBRE |
|
|
|
|
---
|
|
|
|
## Hermes Platform
|
|
|
|
| Port | Service | Reseau | Exposition |
|
|
|------|--------------------------|---------|---------------------------------------------------|
|
|
| 3010 | hermes-workspace-tt | n8n | 0.0.0.0 |
|
|
| 3020 | hermes-workspace-nyora | n8n | 0.0.0.0 |
|
|
| 3030 | hermes-workspace-perso | n8n | 0.0.0.0 |
|
|
| 8650 | hermes-agent-tt | n8n | interne Docker uniquement |
|
|
| 8660 | hermes-agent-nyora | n8n | interne Docker uniquement |
|
|
| 8670 | hermes-agent-perso | n8n | interne Docker uniquement |
|
|
|
|
> Maintenance Hermes : apres CHAQUE mise a jour des images, executer
|
|
> `/usr/local/bin/docker image prune -f` (builds :latest quotidiens empilent ~3.3GB).
|
|
> `scripts/cleanup-backups.sh` pour rotation data.bak (garde 2 derniers jeux).
|
|
|
|
---
|
|
|
|
## Stack Documentaire
|
|
|
|
| Port | Service | Reseau | Exposition |
|
|
|------|--------------------------|---------|---------------|
|
|
| 3001 | gotenberg | n8n | 0.0.0.0 |
|
|
| 3002 | pandoc | n8n | 0.0.0.0 |
|
|
| 3003 | docx-generator | n8n | 127.0.0.1 |
|
|
| 3005 | rla-api | n8n | 0.0.0.0 |
|
|
| 3015 | document-factory | n8n | 0.0.0.0 |
|
|
| 4000 | carbone | n8n | 0.0.0.0 |
|
|
| 5099 | reglement-definitif-api | n8n | 0.0.0.0 |
|
|
| 8002 | document-factory-api | n8n | 0.0.0.0 |
|
|
| 8015 | pptx-tt-api | n8n | 0.0.0.0 |
|
|
| 9998 | tika | n8n | 0.0.0.0 |
|
|
|
|
---
|
|
|
|
## AI Gateway
|
|
|
|
| Port | Service | Reseau | Exposition | Notes |
|
|
|------|--------------------------|---------|---------------|------------------------------------|
|
|
| 3085 | bifrost | n8n | 0.0.0.0 | Gateway LLM multi-modeles |
|
|
| 3086 | bifrost-proxy | n8n | 0.0.0.0 | Auth rewrite + cap max_tokens |
|
|
|
|
---
|
|
|
|
## Applications
|
|
|
|
| Port | Service | Reseau | Exposition |
|
|
|-------|--------------------------|---------|---------------|
|
|
| 3041 | family-help | n8n | 0.0.0.0 |
|
|
| 3042 | linux-mcp-nas | n8n | 0.0.0.0 |
|
|
| 3055 | nyora-veille frontend | n8n | 0.0.0.0 |
|
|
| 3232 | gitea | bridge | 0.0.0.0 |
|
|
| 3888 | Baserow | n8n | 0.0.0.0 |
|
|
| 4292 | Trilium | n8n | 0.0.0.0 |
|
|
| 4501 | Obsidian-Remote | bridge | 0.0.0.0 |
|
|
| 5678 | n8n | n8n | 0.0.0.0 |
|
|
| 6090 | Pingvin-Share | bridge | 0.0.0.0 |
|
|
| 8000 | veille-backend | n8n | interne |
|
|
| 8021 | paperless | n8n | 127.0.0.1 |
|
|
| 8085 | dashboard-terrain | n8n | 0.0.0.0 |
|
|
| 8787 | nyora-notes | n8n | 0.0.0.0 |
|
|
| 9000 | portainer | bridge | 0.0.0.0 |
|
|
| 9443 | portainer (https) | bridge | 0.0.0.0 |
|
|
| 51820 | wg-easy (WireGuard) | host | 0.0.0.0 UDP |
|
|
| 51821 | wg-easy UI | host | 0.0.0.0 |
|
|
| 27123 | Obsidian-Remote sync | bridge | 0.0.0.0 |
|
|
| 27124 | Obsidian-Remote sync | bridge | 0.0.0.0 |
|
|
|
|
---
|
|
|
|
## Media
|
|
|
|
| Port | Service | Reseau | Exposition |
|
|
|-------|--------------------------|--------------------|---------------|
|
|
| 6881 | qbittorrent | media-stack_default| 0.0.0.0 |
|
|
| 7878 | radarr | media-stack_default| 0.0.0.0 |
|
|
| 8191 | flaresolverr | media-stack_default| 0.0.0.0 |
|
|
| 8989 | sonarr | media-stack_default| 0.0.0.0 |
|
|
| 9696 | prowlarr | media-stack_default| 0.0.0.0 |
|
|
| 9866 | qbittorrent UI | media-stack_default| 0.0.0.0 |
|
|
| 32400 | Plex | media-stack_default| local |
|
|
|
|
---
|
|
|
|
## Bases de donnees (internes uniquement)
|
|
|
|
| Port | Service | Exposition |
|
|
|-------|--------------------------|---------------|
|
|
| 5432 | postgres (multiple DBs) | 127.0.0.1 |
|
|
| 6379 | redis (multiple) | local |
|
|
| 3306 | mysql rayhan | local |
|
|
|
|
---
|
|
|
|
## DSM Systeme
|
|
|
|
| Port | Service | Exposition |
|
|
|-------|--------------------------|---------------|
|
|
| 80 | DSM HTTP | 0.0.0.0 |
|
|
| 222 | DSM SSH alternatif | 0.0.0.0 |
|
|
| 443 | DSM HTTPS | 0.0.0.0 |
|
|
| 2222 | Gitea SSH | 0.0.0.0 |
|
|
| 6690 | DSM Cloud Sync | 0.0.0.0 |
|
|
| 8080 | DSM / watchtower | 0.0.0.0 |
|
|
| 22222 | NAS SSH (port principal) | 0.0.0.0 |
|
|
|
|
---
|
|
|
|
## Plages libres recommandees
|
|
|
|
| Plage | Usage suggere |
|
|
|-------------|--------------------------------------|
|
|
| 3021 | LIBRE (hermes-nyora-webui desinstalle 15/06) |
|
|
| 3040-3099 | Extensions Hermes / nouveaux agents |
|
|
| 3091 | OCCUPE (Open WebUI actif port 3091) |
|
|
| 3092 | LIBRE (hermes-dashboard desinstalle 15/06) |
|
|
| 3100-3199 | APIs internes |
|
|
| 8800-8899 | UIs web supplementaires |
|
|
| 8900-8999 | Services experimentaux |
|
|
|
|
---
|
|
|
|
## Ports a ne JAMAIS utiliser
|
|
|
|
- 8787 : nyora-notes (conflit hermes-webui par defaut)
|
|
- 3000 : port interne Docker (ne pas exposer)
|
|
- 5432 : postgres (interne uniquement)
|
|
- 22 : SSH DSM interne (utiliser 22222)
|
|
|
|
---
|
|
|
|
## Historique des modifications
|
|
|
|
| Date | Action | Port | Service |
|
|
|------------|-------------------------------------|-------|--------------------------|
|
|
| 2026-05-28 | Creation initiale du registre | — | — |
|
|
| 2026-05-28 | Deploiement hermes-nyora-webui | 3021 | hermes-nyora-webui |
|
|
| 2026-06-05 | Deploiement linux-mcp-nas | 3042 | linux-mcp-nas |
|
|
| 2026-06-05 | Migration WireGuard VPN vers NAS | 51820 | wg-easy |
|
|
| 2026-06-05 | Migration WireGuard UI vers NAS | 51821 | wg-easy UI |
|
|
| 2026-06-08 | Deploiement dashboard-terrain | 8085 | dashboard-terrain |
|
|
| 2026-06-09 | Deploiement Open WebUI | 3091 | open-webui |
|
|
| 2026-06-09 | Deploiement hermes-dashboard | 3092 | hermes-dashboard |
|
|
| 2026-06-11 | Deploiement nyora-veille | 3055 | veille-frontend |
|
|
| 2026-06-11 | Deploiement veille-backend | 8000 | veille-backend (interne) |
|
|
| 2026-06-15 | DESINSTALLATION hermes-nyora-webui | 3021 | LIBRE |
|
|
| 2026-06-15 | DESINSTALLATION hermes-dashboard | 3092 | LIBRE |
|
|
| 2026-06-16 | Deploiement Bifrost + bifrost-proxy | 3085 | bifrost |
|
|
| 2026-06-16 | Deploiement bifrost-proxy | 3086 | bifrost-proxy |
|
|
| 2026-06-16 | Ajout section Services Actifs | — | ports-registry.md v2 |
|