# Connect Portainer

Add Portainer to Kochab with an API access token and manage containers across environments.

Canonical: https://kochab.io/docs/services/portainer/

import Callout from '@components/Callout.astro';

Portainer aggregates Docker hosts as **environments**. Kochab proxies the Docker Engine API through Portainer; it does not read NAS storage or array state.

## What Kochab exposes through Portainer

- **Environments:** pick local Docker, remote agents, or edge nodes registered in Portainer
- **Containers:** filter/search list, start/stop/restart/pause/unpause/kill/delete, log tail
- **Container detail:** live CPU/memory stats per container
- **Image update:** pull the latest image and recreate the container
- **One Portainer entry** can reach many hosts (via Portainer agents)

## Not exposed through Portainer

- Unraid array/parity, TrueNAS pools, Synology volume layout, SMART, or VM/catalog-app surfaces
- Unraid-style container icons (`iconUrl`); rows use Docker metadata only
- Sonarr/Radarr/etc. (always separate app connections)

Use Portainer for **non-NAS** Docker or **extra** hosts. On Unraid, TrueNAS, or Synology, prefer the native infra client for that box. See [Infrastructure vs container integrations](/docs/infra-vs-containers/).

## Before you start

In Portainer: **My account -> Access tokens -> Add access token**. Copy the token once (Kochab stores it in the device keychain).

<Callout>

Do not use your admin password in Kochab; the app expects an access token.

</Callout>

## Default connection

| Field | Typical value |
|---|---|
| Port | **9443** (HTTPS) or **9000** (HTTP) |
| Scheme | `https` recommended |
| Auth | Access token via `X-Api-Key` |

## Add in Kochab

1. Open **Services -> Add service** and choose **Portainer**.
2. Enter the **URL** of your Portainer server (for example `https://192.168.1.10:9443`).
3. Paste the **access token**.
4. Tap **Test and add**.
5. Open the service -> **Manage containers** and pick an **environment** (local Docker, agent, or edge node).

## TLS

Self-signed Portainer certificates use the same trust flow as other services. See [Certificate trust](/docs/cert-trust).

## Tips

- One Portainer install can reach many hosts via agents; you still add **one** Portainer service in Kochab.
- Container detail, live stats, and logs are available per container after you select an environment.

## Official docs

[Portainer API documentation](https://docs.portainer.io/api/access)