chore: add Arcane and Dockhand TrueNAS compose files

dockhand-truenas-compose.yml

@@ -0,0 +1,37 @@
+# ============================================
+# Dockhand — TrueNAS Compose Draft
+# ============================================
+# Target: TrueNAS regular Docker / Portainer Compose deployment.
+# Source pattern:
+# - TrueNAS Docker data root: /mnt/HomeStorage02/Docker/<ContainerName>/...
+# - Container user convention: PUID=568 / PGID=568 where supported.
+#
+# Deploy after review:
+#   docker compose --env-file dockhand-truenas.env -f dockhand-truenas-compose.yml up -d
+#
+# Validate:
+#   docker compose --env-file dockhand-truenas.env.example -f dockhand-truenas-compose.yml config
+#
+# Notes:
+# - Dockhand needs access to /var/run/docker.sock to manage the local Docker host.
+# - Keep the Docker socket exposure LAN/VPN-only; do not expose this UI publicly.
+# - Persistent app data is stored under /app/data.
+# ============================================
+
+services:
+  dockhand:
+    image: ${DOCKHAND_IMAGE:-fnsys/dockhand}:${DOCKHAND_TAG:-latest}
+    container_name: dockhand
+    restart: unless-stopped
+    init: true
+    ports:
+      - "${DOCKHAND_HTTP_PORT:-3000}:3000"
+    environment:
+      TZ: ${TZ:-America/Chicago}
+      PUID: ${PUID:-568}
+      PGID: ${PGID:-568}
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock
+      - ${TRUENAS_DOCKER_ROOT:-/mnt/HomeStorage02/Docker}/Dockhand/data:/app/data
+    security_opt:
+      - no-new-privileges:true