
So, log into the Synology DSM using terminal and elevate your session to root. Also, I would recommend setting a custom SSH port as the default port for SSH, port 22 is a well known port used by hackers to get access to network clients.


To find out if your Synology has an Intel chipset, check of the following url. It is recommended to run Docker on Synology's with an Intel chipset - this is because it is required to take full advantage of all Docker functionality. Now, this post will explain how to download and install the Docker package on the Synology DSM and explain how to easily set up a Docker container running the application Ghost - Ghost is an open source publishing platform which is beautifully designed, easy to use, and free for everyone. The biggest benefit with Docker in my point of view is all the available applications you can test and play around with - you can even make your own containers with your custom apps!! How can I prevent this and use dockers only within the network? - In my use case I'd have 4 dockers within a network with only a single docker facing "outwards": a postgres docker, a redis docker, a node docker and the outwards facing docker: an nginx docker acting as reverse proxy & providing the static files.The Docker package offered on the Synology DSM is a great tool for learning and easily creating applications which would be hard to run otherwise. Even if I don't provide anything synology will provide a port by itself using auto. However when I add a docker through the GUI in synology - even if I add said dockers to a network and remove them from the default network -, I need to supply a free, unique port per docker. (Non external ports only have to be unique within the network). Adding a strong layer of protection while making managing of groups of dockers easier. This has as advantage that the port itself can only be used from within the network the docker is used, yet invisible to the outside world. When I add a docker to a bridge network, normally (when doing it on my local pc) I can leave exposed ports "open" without connecting them to an external port.
