- Add health check (curl /api/health) so Traefik can verify container health - Set container hostname to nas.alexzaw.dev - Remove hardcoded demo credentials from login page - Remove admin123 fallback password — require SMB_PASSWORD env var - Fail fast if no admin password is configured