diff --git a/dockerfiles/docker-compose.all-in-one.nas.yml b/dockerfiles/docker-compose.all-in-one.nas.yml
new file mode 100644
index 000000000..b6833cdbf
--- /dev/null
+++ b/dockerfiles/docker-compose.all-in-one.nas.yml
@@ -0,0 +1,35 @@
+# Docker Compose file for the AliasVault all-in-one container
+#
+# Specific for NAS devices:
+# - Uses custom HTTP ports by default to avoid conflicts
+# - Uses named bind mounts for the database, logs and secrets to ensure they are persisted
+#
+version: "3"
+services:
+  aliasvault:
+    image: ghcr.io/aliasvault/aliasvault:latest
+    container_name: aliasvault
+    restart: unless-stopped
+
+    ports:
+      - "1080:80"
+      - "1443:443"
+      - "25:25"
+      - "587:587"
+
+    volumes:
+      - avdata:/database
+      - avlogs:/logs
+      - avsecrets:/secrets
+
+    environment:
+      PUBLIC_REGISTRATION_ENABLED: "true"
+      IP_LOGGING_ENABLED: "true"
+      FORCE_HTTPS_REDIRECT: "false"
+      SUPPORT_EMAIL: ""
+      PRIVATE_EMAIL_DOMAINS: ""
+
+volumes:
+  avdata:
+  avlogs:
+  avsecrets:
diff --git a/dockerfiles/docker-compose.all-in-one.yml b/dockerfiles/docker-compose.all-in-one.yml
index 87bf335ca..6f28b5ac3 100644
--- a/dockerfiles/docker-compose.all-in-one.yml
+++ b/dockerfiles/docker-compose.all-in-one.yml
@@ -1,3 +1,8 @@
+# Docker Compose file for the AliasVault all-in-one container
+#
+# This is the general purpose template which uses local folder bind mounts for the database, logs and secrets.
+# - For NAS devices, its safer to use the docker-compose.all-in-one.nas.yml template instead.
+#
 services:
   aliasvault:
     image: ghcr.io/aliasvault/aliasvault:latest