Compose: /srv/docker/samba/docker-compose.yml
Static configuration/source: no additional mounted configuration
Non-secret environment: share definitions and the NetBIOS name are declared inline in Compose; account, UID, and share-user settings are supplied by the central environment; there is no project-local .env
Secrets: /srv/docker/secrets/samba/.env
NVMe application state: none
Bulk HDD data: none owned by Samba
Other mounts: /data/Data1 read-write, /srv/downloads read-only, /srv/certs read-only, /home/beda/nautilus-docs read-write, and ./samba_shares as the explicit /shares volume root

Secrets are never committed to this repository. The central secret environment is supplied to the Samba service.

Dependencies and recovery

Networks/dependencies: Samba uses host networking and depends on /data/Data1, /srv/downloads, /srv/certs, and /home/beda/nautilus-docs being available; no container dependencies are declared
Back up: the separately protected Samba secret environment; shared source paths follow their respective backup policies
Re-creatable: the Samba container and empty samba_shares mount-point scaffolding; no persistent cache or Samba-owned application state is declared