diff --git a/deploy/nas/README.md b/deploy/nas/README.md
index 30d21a72..d537d7eb 100644
--- a/deploy/nas/README.md
+++ b/deploy/nas/README.md
@@ -7,7 +7,7 @@ need Docker Hub access. Deployment files and Markdown data remain separate:
 - Deployment: `个人空间/docker/plainleaf`
 - Markdown space: `个人空间/笔记管理/Plainleaf`
 
-The server listens on NAS port `3000`, runs as the NAS account's UID/GID, and
+The server listens on NAS port `31230`, runs as the NAS account's UID/GID, and
 has SilverBullet shell execution disabled. Authentication is supplied through a
 deployment-local `.env` file that must not be committed.
 
@@ -17,7 +17,7 @@ The intended `.env` keys are:
 PLAINLEAF_IMAGE_TAG=<git-short-sha>
 PLAINLEAF_UID=1001
 PLAINLEAF_GID=1001
-PLAINLEAF_PORT=3000
+PLAINLEAF_PORT=31230
 PLAINLEAF_SPACE_PATH=/tmp/zfsv3/sata11/13616066635/data/笔记管理/Plainleaf
 PLAINLEAF_USER=your-user:your-password
 ```
diff --git a/deploy/nas/compose.yaml b/deploy/nas/compose.yaml
index e6104af3..3ff76c07 100644
--- a/deploy/nas/compose.yaml
+++ b/deploy/nas/compose.yaml
@@ -14,7 +14,7 @@ services:
       SB_USER: ${PLAINLEAF_USER:?Set PLAINLEAF_USER in the NAS deployment .env file}
       SB_SHELL_BACKEND: "off"
     ports:
-      - "${PLAINLEAF_PORT:-3000}:3000"
+      - "${PLAINLEAF_PORT:-31230}:3000"
     volumes:
       - "${PLAINLEAF_SPACE_PATH:?Set PLAINLEAF_SPACE_PATH in the NAS deployment .env file}:/space"
     security_opt: