You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
release: v6.14.3 — NAS Docker section in host-connection guide
Closes a doc gap. v6.12.0-v6.12.2 shipped platform detection +
How-Tos for 5 NAS platforms (Synology, Unraid, TrueNAS, QNAP, OMV)
but the "How to Connect Docker Hosts" card on #/hosts never
mentioned them — users had to discover the platform pages by
accident.
New full-width section between the 2x2 connection-type grid and the
architecture diagram. Two columns:
Left — generic SSH-Tunnel setup (any NAS):
1. Enable SSH on the NAS UI
2. Add admin to docker group
3. SSH key auth → links to the canonical How-To
4. Add Host → SSH Tunnel
5. Brand-colored pill links to the 5 platform How-Tos
Right — Synology DSM 7.x security hardening (9 items):
- SSH key auth + disable PasswordAuthentication
- Move SSH off port 22
- DSM 2FA for admin
- Auto Block after N failed logins
- Firewall: SSH to LAN only
- Disable built-in admin user
- Read-only docker.sock mount
- Weekly Security Advisor scan
- HTTPS-only DSM UI
Each item has the exact DSM Control Panel path. Closing tip points
back to the auto-detected platform badge on Multi-Host page.
Bilingual: 19 new i18n keys × EN + RO.
Tests: 740/4 (unchanged — pure UI addition).
Copy file name to clipboardExpand all lines: CHANGELOG.md
+45Lines changed: 45 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -2,6 +2,51 @@
2
2
3
3
All notable changes to Docker Dash are documented here.
4
4
5
+
## [6.14.3] - 2026-04-22 — "NAS Docker section in the host-connection guide"
6
+
7
+
The "How to Connect Docker Hosts" card on `#/hosts` covered TCP+TLS, SSH Tunnel, Docker Desktop, and Unix Socket — but had nothing about NAS platforms even though we'd shipped detection + per-platform How-Tos for 5 of them in v6.12.0–v6.12.2. Closes that gap.
8
+
9
+
### Added — NAS Docker connection card
10
+
11
+
Full-width section between the 2×2 connection-type grid and the architecture diagram. Two columns:
12
+
13
+
**Left — generic connection setup (any NAS):**
14
+
1. Enable SSH on the NAS UI
15
+
2. Add admin user to the `docker` group
16
+
3. Set up SSH key auth (links to the canonical SSH Key How-To shipped in v6.13.1)
17
+
4. Add Host → SSH Tunnel
18
+
5. Pill links to the 5 platform-specific How-Tos: Synology DSM, Unraid, TrueNAS SCALE, QNAP, OpenMediaVault — each with the platform's brand color so users can spot their NAS at a glance
9 actionable items, each with the exact DSM Control Panel path:
22
+
- SSH key auth + disable PasswordAuthentication (with the "test the key first" warning)
23
+
- Move SSH off port 22 to a non-standard port
24
+
- DSM 2-factor authentication for admin
25
+
- Auto Block after N failed logins
26
+
- Firewall: SSH to LAN only
27
+
- Disable the built-in `admin` user
28
+
- Mount Docker socket read-only when running Docker Dash on the NAS itself
29
+
- Weekly DSM Security Advisor scan
30
+
- HTTPS-only DSM UI (with a note about HTTP credential capture even on LAN)
31
+
32
+
Closing tip points users back to the auto-detected platform badge on the Multi-Host page.
33
+
34
+
### Bilingual
35
+
36
+
-`pages.hosts.guideNas*` keys added to both `en.js` and `ro.js` — 19 new strings × 2 languages = 38 entries. Matches the existing bilingual pattern; the Translations tab + DeepL/Google integration shipped in v6.11.0 can fill the other 9 languages with one click when an admin gets to it.
Post-v6.14.0 cross-release UX audit surfaced 11 inconsistencies accumulated across v6.11.x–v6.14.0. This release ships the 7 trivial ones (all S-class per the audit); the 3 medium and 1 large items need a design-system decision first and are deferred.
guideNasIntro: 'Most modern NAS platforms ship Docker (or a thin wrapper around it) and connect to Docker Dash via SSH Tunnel. The platform is auto-detected from <code>docker info</code> and rendered as a branded badge on the Multi-Host page. Detailed per-platform How-To guides cover the platform-specific quirks.',
422
+
guideNasConnTitle: 'Connection setup (any NAS)',
423
+
guideNasStep1: 'Enable SSH on the NAS (UI: Control Panel → Terminal/SSH or equivalent).',
424
+
guideNasStep2: 'Add your admin user to the group:',
425
+
guideNasStep3: 'Set up SSH key authentication (recommended over passwords)',
426
+
guideNasStep3Link: 'SSH Key How-To (covers all NAS platforms)',
guideNasSec1: '<strong>SSH key auth, then disable PasswordAuthentication</strong> in <code>/etc/ssh/sshd_config</code> (test the key works first, otherwise you lock yourself out).',
431
+
guideNasSec2: '<strong>Move SSH off port 22</strong> to a non-standard port (Control Panel → Terminal & SNMP). Cuts ~99% of bot traffic.',
432
+
guideNasSec3: '<strong>Enable DSM 2-factor authentication</strong> for the admin account (Personal → Account → 2-Factor Authentication).',
433
+
guideNasSec4: '<strong>Auto Block</strong>: Control Panel → Security → Account → enable Auto Block after N failed logins (recommended: 5 within 5 minutes, ban for 24h).',
434
+
guideNasSec5: '<strong>Restrict SSH to LAN only</strong> via DSM Firewall (Control Panel → Security → Firewall). Block port 22/SSH from any external IP range.',
435
+
guideNasSec6: '<strong>Disable the built-in <code>admin</code> user</strong> after creating a non-default admin (Control Panel → User & Group → admin → Edit → Disable).',
436
+
guideNasSec7: '<strong>Mount Docker socket read-only</strong> when running Docker Dash on the NAS itself: <code>-v /var/run/docker.sock:/var/run/docker.sock:<strong>ro</strong></code>. Limits damage if the dashboard is ever compromised.',
guideNasSec9: '<strong>HTTPS-only for DSM UI</strong> (Control Panel → Network → DSM Settings → Automatically redirect HTTP to HTTPS). Even on LAN — HTTP credentials over WiFi are trivial to capture.',
439
+
guideNasTip: 'Auto-detection identifies your NAS platform + DSM/QTS/OMV/etc. version from <code>docker info</code> with no extra configuration. Look for the platform badge above the host card on the Multi-Host page.',
guideNasIntro: 'Majoritatea platformelor NAS moderne au Docker (sau un wrapper subtire) si se conecteaza la Docker Dash prin SSH Tunnel. Platforma este auto-detectata din <code>docker info</code> si afisata ca badge pe pagina Multi-Host. Ghidurile dedicate per platforma acopera ciudateniile specifice fiecareia.',
guideNasSecTitle: 'Hardening de securitate Synology (DSM 7.x)',
397
+
guideNasSec1: '<strong>Cheie SSH, apoi dezactiveaza PasswordAuthentication</strong> in <code>/etc/ssh/sshd_config</code> (testeaza cheia INTAI, altfel te blochezi singur afara).',
398
+
guideNasSec2: '<strong>Muta SSH de pe portul 22</strong> pe un port non-standard (Control Panel → Terminal & SNMP). Taie ~99% din traficul de boti.',
399
+
guideNasSec3: '<strong>Activeaza autentificare cu doi factori</strong> pentru contul de admin (Personal → Account → 2-Factor Authentication).',
400
+
guideNasSec4: '<strong>Auto Block</strong>: Control Panel → Security → Account → activeaza Auto Block dupa N login-uri esuate (recomandat: 5 in 5 minute, ban 24h).',
401
+
guideNasSec5: '<strong>Restrictioneaza SSH doar la LAN</strong> prin DSM Firewall (Control Panel → Security → Firewall). Blocheaza portul 22/SSH de la orice IP extern.',
402
+
guideNasSec6: '<strong>Dezactiveaza user-ul integrat <code>admin</code></strong> dupa ce creezi un alt admin (Control Panel → User & Group → admin → Edit → Disable).',
403
+
guideNasSec7: '<strong>Monteaza socket-ul Docker read-only</strong> cand rulezi Docker Dash chiar pe NAS: <code>-v /var/run/docker.sock:/var/run/docker.sock:<strong>ro</strong></code>. Limiteaza pagubele daca dashboard-ul e vreodata compromis.',
guideNasSec9: '<strong>Doar HTTPS pentru UI-ul DSM</strong> (Control Panel → Network → DSM Settings → Automatically redirect HTTP to HTTPS). Inclusiv pe LAN — credentialele HTTP pe WiFi sunt triviale de capturat.',
406
+
guideNasTip: 'Auto-detect identifica platforma NAS + versiunea DSM/QTS/OMV/etc. din <code>docker info</code>, fara configurare suplimentara. Cauta badge-ul de platforma deasupra cardului de host pe pagina Multi-Host.',
title: 'NAS Docker section in the host-connection guide',
16
+
changes: [
17
+
{type: 'feature',text: 'New full-width NAS Docker section in the "How to Connect Docker Hosts" card on #/hosts. Closes the gap where v6.12.0-v6.12.2 added platform detection + How-Tos for 5 NAS platforms but the host-connection guide on #/hosts never mentioned them.'},
18
+
{type: 'feature',text: 'Left column — generic SSH-Tunnel setup that works on any NAS, with brand-colored pill links to the 5 platform-specific How-Tos: Synology DSM (slate blue), Unraid (orange), TrueNAS SCALE (teal), QNAP (red), OpenMediaVault (green). Users see their NAS at a glance.'},
19
+
{type: 'feature',text: 'Right column — 9-item Synology DSM 7.x security hardening checklist: SSH key auth + disable password, move SSH off port 22, 2FA for admin, Auto Block after failed logins, firewall SSH to LAN only, disable built-in admin user, read-only docker.sock mount, weekly Security Advisor scan, HTTPS-only DSM UI. Each with the exact Control Panel path.'},
20
+
{type: 'improvement',text: 'Bilingual: 19 new i18n keys in en.js + ro.js. Matches existing pattern; the Translations tab can fill the other 9 languages on demand.'},
0 commit comments