Add full NAS service catalog for disaster recovery.

Compose files and configs for postgres, adguard, duckdns, homarr, neo4j,
portainer, remotely, and monitoring; RESTORE.md and sync-from-nas script.
Sanitize pgAdmin secrets; document homelab-command as separate repo.

Co-authored-by: Cursor <cursoragent@cursor.com>

docker/postgres-web/docker-compose.yml

@@ -18,7 +18,7 @@ services:
     environment:
       # Standaard inlog voor de web UI
       - PGADMIN_DEFAULT_EMAIL=mo@el-kadi.nl
-      - PGADMIN_DEFAULT_PASSWORD=${PGADMIN_PASSWORD:-WaQTUw2t}
+      - PGADMIN_DEFAULT_PASSWORD=${PGADMIN_PASSWORD:?Zet PGADMIN_PASSWORD in .env}
       # Masquerade root URL voor nginx reverse proxy
       - PGADMIN_CONFIG_SERVER_MODE=True
       - PGADMIN_CONFIG_MASTER_PASSWORD_REQUIRED=False

docker/postgres-web/servers.json

@@ -7,7 +7,7 @@
       "Port": 5433,
       "MaintenanceDB": "homelab",
       "Username": "mo",
-      "Password": "WaQTUw2t",
+      "Password": "",
       "SSLMode": "prefer",
       "PassFile": "",
       "SSLCert": "",

docker/postgres-web/servers.json.example

@@ -0,0 +1,15 @@
+{
+  "Servers": {
+    "1": {
+      "Name": "Homelab PostgreSQL",
+      "Group": "Servers",
+      "Host": "192.168.1.211",
+      "Port": 5433,
+      "MaintenanceDB": "homelab",
+      "Username": "mo",
+      "Password": "VUL_IN_PGADMIN_UI",
+      "SSLMode": "prefer",
+      "Comment": "Synology NAS — Homelab dashboard database"
+    }
+  }
+}