1

Docker support is useful but it doesn’t cover everything. There are things that need access to the host system:

  • Installing WireGuard or Tailscale. This is the big one for me, a NAS is exactly the device you want to reach from outside your home network, and containers can’t properly manage host networking or kernel modules.

  • Debugging when something goes wrong: reading logs, checking SMART data, poking at the filesystem.

  • Running backup tools like restic or rsync directly on the host with cron.

I get that you don’t want people bricking their devices and filing support tickets. Some ideas to limit that:

  • Off by default, behind a “developer mode” toggle in advanced settings with a warning that modifications aren’t supported.

  • SSH keys only, no password auth, LAN-only by default.

  • If the OS uses A/B partitions or an overlay for updates, a factory reset could recover from anything a user breaks.

SSH access is standard on Synology, QNAP, Asus, and UGREEN NAS devices, and Firefly’s whole background is open hardware, so this seems like a natural fit. The kind of person buying this device tends to be technical .

If this is already possible, please point me in the right direction. I’ve gone through the documentation and settings and couldn’t find any way to connect over SSH. Port 22 doesn’t appear to be open and I don’t see anything in the app or web UI to enable it. Happy to be told I missed something.

2

You can run Tailscale, rsync and WireGuerd as containers.