diff --git a/.env.example b/.env.example
index 307e330..388866b 100644
--- a/.env.example
+++ b/.env.example
@@ -93,3 +93,22 @@ REALESTATE_NOTIFY_TIMEOUT=15
 PEXELS_API_KEY=
 YOUTUBE_DATA_API_KEY=
 # VIDEO_DATA_DIR=/app/data/videos  # 기본값, 재정의 필요 시만 설정
+
+# ─── packs-lab — NAS 자료 다운로드 자동화 ────────────────────────────
+# Synology DSM 7.x 인증 (공유 링크 발급용)
+DSM_HOST=https://gahusb.synology.me:5001
+DSM_USER=
+DSM_PASS=
+
+# Vercel SaaS ↔ backend HMAC 시크릿 (양쪽 동일 값)
+BACKEND_HMAC_SECRET=
+
+# Supabase pack_files 테이블 접근 (service_role 키, RLS 우회)
+SUPABASE_URL=https://<project>.supabase.co
+SUPABASE_SERVICE_KEY=
+
+# admin upload 토큰 TTL (초). default 1800 = 30분
+UPLOAD_TOKEN_TTL_SEC=1800
+
+# 로컬 개발: ./data/packs / NAS 운영: /volume1/docker/webpage/media/packs
+PACK_DATA_PATH=./data/packs
diff --git a/docker-compose.yml b/docker-compose.yml
index fa6823b..708c2d9 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -181,16 +181,18 @@ services:
     container_name: packs-lab
     restart: unless-stopped
     ports:
-      - "18910:8000"
+      - "18950:8000"
     environment:
-      DSM_HOST: ${DSM_HOST}
-      DSM_USER: ${DSM_USER}
-      DSM_PASS: ${DSM_PASS}
-      BACKEND_HMAC_SECRET: ${BACKEND_HMAC_SECRET}
-      SUPABASE_URL: ${SUPABASE_URL}
-      SUPABASE_SERVICE_KEY: ${SUPABASE_SERVICE_KEY}
+      - TZ=${TZ:-Asia/Seoul}
+      - DSM_HOST=${DSM_HOST:-}
+      - DSM_USER=${DSM_USER:-}
+      - DSM_PASS=${DSM_PASS:-}
+      - BACKEND_HMAC_SECRET=${BACKEND_HMAC_SECRET:-}
+      - SUPABASE_URL=${SUPABASE_URL:-}
+      - SUPABASE_SERVICE_KEY=${SUPABASE_SERVICE_KEY:-}
+      - UPLOAD_TOKEN_TTL_SEC=${UPLOAD_TOKEN_TTL_SEC:-1800}
     volumes:
-      - ${RUNTIME_PATH:-.}/media/packs:/volume1/docker/webpage/media/packs
+      - ${PACK_DATA_PATH:-./data/packs}:/app/data/packs
     healthcheck:
       test: ["CMD", "python", "-c", "import urllib.request; urllib.request.urlopen('http://localhost:8000/health')"]
       interval: 30s