All the applications you love—built and maintained by a community member who understands what you need on Unraid. Love a particular app or plugin? Donate directly to the developer to support their work.
Created by a legend
Andrew (aka Squid) has worked tirelessly to build and enhance the experience of Community Apps for users like you. Listen to his story.
Moderated and Vetted
Moderators ensure that apps listed in the store offer a safe, compatible, and consistent experience. Learn more about our guidelines.
A complete and local NVR designed for Home Assistant with AI object detection. Uses OpenCV and Tensorflow to perform realtime object detection locally for IP cameras.
You cas use a integrated or dedicated GPU (Intel/AMD/Nvidia) to perform the image decoding of the input streams of your cameras.
Optionally (but highly recommended), you can use multiple devices to perform the object detetion, such as a Google Coral Accelerator Nvidia GPU, OpenVINO (Intel GPU) and Intel NCS2 VPU
See the documentation for more details about your specific hardware and needs (https://docs.frigate.video/). This is a general templeate that aims to give a fast deoplyment for every user so check all the options carefully and remove all the configurations that you are not going to use.
Unraid Version of: myoung34/github-runner (unoffical)
This will run the new self-hosted Github actions runners with docker-in-docker. This project is meant for repo level github runners(e.g personal repos :) )
If you want to support my random projects:
https://www.patreon.com/user?u=35280989
Hoodik is a lightweight, secure, and self-hosted cloud storage solution. It's designed and built with Rust and Vue, focusing on end-to-end encryption that shields your data from prying eyes and hackers. Hoodik supports file uploading and downloading, making it easy for you to share files with other users. The simple and intuitive web interface makes file management a breeze. Thanks to Rust's focus on speed and performance, your data transfers will be lightning fast.
Nessus is a network vulnerability scanner. This is a paid product, but for small home deployments one can request a free license during the setup GUI steps for internal/small networks.
The Keeper Automator service performs instant device approvals upon a successful login from the SSO identity provider. Once Automator is running, users can seamlessly access Keeper on a new (not previously approved) device after a successful authentication with your identity provider, without any further approval steps.
More Information: https://docs.keeper.io/sso-connect-cloud/device-approvals/automator
A fully automated, accurate, and extensive scanner for finding vulnerable log4j hosts
To Use
After install you will see this container in the docker tab but will apear as not started and seem not to start and the log will show an error.
You must add a url list before running to get a result.
The container will have made a folder in the appdata folder. You will need to reset its permissions run the line below from the Unraid terminal
chmod -R u-x,go-rwx,go+u,ugo+X /mnt/user/appdata/log4j-scan/
then put a file called urls.txt with each url on a separate line in that location then run the below command
After run the container and view the log to see the result post arguments in the template
optional arguments can be added to the post arguements (see https://github.com/fullhunt/log4j-scan)
-h, --help show this help message and exit
-u URL, --url URL Check a single URL.
-p PROXY, --proxy PROXY
send requests through proxy
-l USEDLIST, --list USEDLIST
Check a list of URLs.
--request-type REQUEST_TYPE
Request Type: (get, post) - .
--headers-file HEADERS_FILE
Headers fuzzing list - .
--run-all-tests Run all available tests on each URL.
--exclude-user-agent-fuzzing
Exclude User-Agent header from fuzzing - useful to bypass weak checks on User-Agents.
--wait-time WAIT_TIME
Wait time after all URLs are processed (in seconds) - .
--waf-bypass Extend scans with WAF bypass payloads.
--custom-waf-bypass-payload CUSTOM_WAF_BYPASS_PAYLOAD
Test with custom WAF bypass payload.
--test-CVE-2021-45046
Test using payloads for CVE-2021-45046 (detection payloads).
--dns-callback-provider DNS_CALLBACK_PROVIDER
DNS Callback provider (Options: dnslog.cn, interact.sh) - .
--custom-dns-callback-host CUSTOM_DNS_CALLBACK_HOST
Custom DNS Callback Host.
--disable-http-redirects
Disable HTTP redirects. Note: HTTP redirects are useful as it allows the payloads to have a higher chance of reaching vulnerable systems.
Previously PiAlert - this can be installed in the same config directories
The system continuously scans the network for New devices, New connections (re-connections), Disconnections, "Always Connected" devices down, Devices IP changes and Internet IP address changes. Scanning methods are:
Method 1: arp-scan. The arp-scan system utility is used to search for devices on the network using arp frames.
Method 2: Pi-hole. This method is optional and complementary to method 1. If the Pi-hole DNS server is active, Pi.Alert examines its activity looking for active devices using DNS that have not been detected by method 1.
Method 3. dnsmasq. This method is optional and complementary to the previous methods. If the DHCP server dnsmasq is active, Pi.Alert examines the DHCP leases (addresses assigned) to find active devices that were not discovered by the other methods.
NOTE: remember to set the scan subnets in the pialert.conf, or in the settings UI. It can take up to 15 minutes for the first scan, subsequent scans are much quicker
Containerized OneTimeSecret with customization, and without paid/account features.
<br>
Just simple, secure password sharing.
<br>
Keep sensitive info (passwords) out of your email & chat logs.
<br>
<br>
Requires Redis container with a password set on it! See support thread for more information.
An "all-in-one" docker for all your private browsing needs (including OpenVPN client with nftables kill switch ; Socks5 + HTTP proxy to both VPN and TOR (the onion router) ; DNS server to DoT (DNS-over-TLS) services).
NOTE: you must place your own OpenVPN configuration to the host path that is mapped to /etc/openvpn (The ovpn file must be named openvpn.ovpn. Credentials + certs can be in the same file or split out into multiple files - the flexibility is yours.)
Set DNS_SERVERS to 127.2.2.2 to use DNS-over-TLS (use google and cloudflare services by default). Your DNS query out of the VPN exit will also be encrypted for even more security. Set it to other services IP's will use normal unencrypted services.
Set HOST_NETWORK to your Unraid server network in CIDR format e.g. 192.168.1.0/24.
For more detailed instructions, refer to the support thread (https://forums.unraid.net/topic/96233-support-testdasi-repo/) or project page (https://github.com/testdasi/openvpn-client-aio).
An "all-in-one" docker for all your private browsing needs (including OpenVPN client with nftables kill switch ; Socks5 + HTTP proxy to the VPN ; DNS server to DoT (DNS-over-TLS) services). It's the same as OpenVPN AIO Client docker but without TOR.
NOTE: you must place your own OpenVPN configuration to the host path that is mapped to /etc/openvpn (The ovpn file must be named openvpn.ovpn. Credentials + certs can be in the same file or split out into multiple files - the flexibility is yours.)
Set DNS_SERVERS to 127.2.2.2 to use DNS-over-TLS (use google and cloudflare services by default). Your DNS query out of the VPN exit will also be encrypted for even more security. Set it to other services IP's will use normal unencrypted services.
Set HOST_NETWORK to your Unraid server network in CIDR format e.g. 192.168.1.0/24.
For more detailed instructions, refer to the support thread (https://forums.unraid.net/topic/96233-support-testdasi-repo/) or project page (https://github.com/testdasi/openvpn-client-aio).
OpenVPN Client with integrated (NZB)Hydra2-Deluge-Sabnzbd (and HTTP + SOCKS5 proxies). Now with a Web GUI quick launch.
High-level instructions: (1) Create an appdata folder in host and create a openvpn subfolder. (2) Copy your OpenVPN configuration to the above openvpn subfolder (must include openvpn.ovpn + credentials + certs). (3) Don't forget to map /data in the docker to the host (you can map the parent or individual subfolders depending on needs). (4) Start docker (other apps should configure themselves on first run).
DON'T FORGET THE OVPN FILE!!!
Default password for deluge is deluge
Set DNS_SERVERS to 127.2.2.2 to use DNS-over-TLS (use google and cloudflare services by default). Your DNS query out of the VPN exit will also be encrypted for even more security. Set it to other services IP's will use normal unencrypted services.
Set HOST_NETWORK to your Unraid server network in CIDR format e.g. 192.168.1.0/24.
For more detailed instructions, refer to the support thread (https://forums.unraid.net/topic/96233-support-testdasi-repo/) or project page (https://github.com/testdasi/openvpn-hydesa).
OpenVPN Client with integrated (NZB)Hydra2-RTorrent (Flood GUI)-Sabnzbd (and HTTP + SOCKS5 proxies). Now with a Web GUI quick launch.
High-level instructions: (1) Create an appdata folder in host and create a openvpn subfolder. (2) Copy your OpenVPN configuration to the above openvpn subfolder (must include openvpn.ovpn + credentials + certs). (3) Don't forget to map /data in the docker to the host (you can map the parent or individual subfolders depending on needs). (4) Start docker (other apps should configure themselves on first run).
DON'T FORGET THE OVPN FILE!!!
Default login to flood is admin/flood
Set DNS_SERVERS to 127.2.2.2 to use DNS-over-TLS (use google and cloudflare services by default). Your DNS query out of the VPN exit will also be encrypted for even more security. Set it to other services IP's will use normal unencrypted services.
Set HOST_NETWORK to your Unraid server network in CIDR format e.g. 192.168.1.0/24.
For more detailed instructions, refer to the support thread (https://forums.unraid.net/topic/96233-support-testdasi-repo/) or project page (https://github.com/testdasi/openvpn-hyrosa).
KeePassXC in a container. Keep your passwords safe!
I highly recommend also downloading the KeePassXC browser extension for easy input of passwords on webpages.
Save your database in the /config folder for persistence after updates/reboots and backups with your AppData.
This version requires a separate PostgreSQL container. PasswordPusher or PWPush is an opensource application to communicate passwords over the web. Links to passwords expire after a certain number of views and/or time has passed.
Ephemeral version requires no other database container! PasswordPusher or PWPush is an opensource application to communicate passwords over the web. Links to passwords expire after a certain number of views and/or time has passed.
Pi-Hole - let's block those pesky ads! Now with DNS-over-HTTPS and DNS-over-TLS! pihole.doh!
Don't send your DNS queries in plain text.
YOU MUST ASSIGN A STATIC IP TO THE DOCKER FOR PIHOLE TO WORK.
You must set both DNS1 and DNS2 variables to 127.1.1.1#5153 (DoH) and/or 127.2.2.2#5253 (DoT). To use just DoH or just DoT, set both DNS1 and DNS2 to the same value.
Otherwise, same instructions as official Pi-Hole.
NOTE 1: Port 53 can only be used with custom br0/br1 network and a static IP address.
NOTE 2: DNS lookup rarely ever works with ports other than 53 i.e. see note above about static IP.
NOTE 3: UnRaid network settings DNS server cannot point to a docker IP.
NOTE 4: This should be drop-in replacement for the now deprecated FLIPPINTURT Template.
Pi-Hole - let's block those pesky ads! Now with DNS-over-HTTPS and DNS-over-TLS! pihole.doh!
Don't send your DNS queries in plain text.
YOU MUST ASSIGN A STATIC IP TO THE DOCKER FOR PIHOLE TO WORK.
You must set both DNS1 and DNS2 variables to 127.1.1.1#5153 (DoH) and/or 127.2.2.2#5253 (DoT). To use just DoH or just DoT, set both DNS1 and DNS2 to the same value.
Otherwise, same instructions as official Pi-Hole.
NOTE 1: Port 53 can only be used with custom br0/br1 network and a static IP address.
NOTE 2: DNS lookup rarely ever works with ports other than 53 i.e. see note above about static IP.
NOTE 3: UnRaid network settings DNS server cannot point to a docker IP.
Pi-Hole - let's block those pesky ads! Now with DNS-over-HTTPS and DNS-over-TLS! pihole.doh!
Don't send your DNS queries in plain text.
YOU MUST ASSIGN A STATIC IP TO THE DOCKER FOR PIHOLE TO WORK.
You must set both DNS1 and DNS2 variables to 127.1.1.1#5153 (DoH) and/or 127.2.2.2#5253 (DoT). To use just DoH or just DoT, set both DNS1 and DNS2 to the same value.
Otherwise, same instructions as official Pi-Hole.
NOTE 1: Port 53 can only be used with custom br0/br1 network and a static IP address.
NOTE 2: DNS lookup rarely ever works with ports other than 53 i.e. see note above about static IP.
NOTE 3: UnRaid network settings DNS server cannot point to a docker IP.
This Docker deployment runs both Pi-Hole and Unbound in a single container.
The base image for the container is the official Pi-Hole container, with an extra build step added to install the Unbound resolver directly into to the container based on instructions provided directly by the Pi-Hole team.
FYI - This template will install the "one-container" version the developer has built.
A secure SOCKS5 proxy. Shadowsocks is a free and open-source encryption protocol project, widely used in China to circumvent Internet censorship. It was created in 2012 by a Chinese programmer named "clowwindy", and multiple implementations of the protocol have been made available since. Can be used with any SOCKS or Shadowsocks client.
Can be seen as a alternative, hard to detect, VPN as well.
UNRAID template that JUST WORKS, brought to you by Flight777!
Container does not have a WEBUI, as it's very lightweight and all settings are set by the variables. Check the logs to verify it is running correctly
Shadowsocks is a tunneling proxy developed to be free, open-source, and mainly used by Chinese people to bypass the Great Firewall restrictions. While using, it covers your browser traffic only, and it is almost impossible to detect and block it.
The Docker image is:
--Based on Scratch (no OS) for a total size of 3.53MB
--Compatible with all the CPU architectures supported by Docker: linux/amd64, linux/386, linux/arm64, linux/arm/v6, linux/arm/v7, linux/s390x, linux/ppc64le and linux/riscv64
--Shadowsocks is implemented in Go and compiled statically using Go 1.16
Shapeshifter-Obfuscator is a dockerized implementation of shapeshifter-dispatcher provided by The Operator Foundation. The shapeshifter suite provides command-line proxy and obfuscation tools that effectively modify packets to evade advanced IDS systems.
This container is targeted at advanced users and provides no graphical user interface. Refer to the shapeshifter-dispatcher documentation on GitHub to learn more about the different proxy modes and transports supported by this tool.
https://github.com/OperatorFoundation/shapeshifter-dispatcher
Use this plugin to change primary SSH configuration settings and enable Public Key authentication on a per user basis. It also gives the ability to stop/start and enable/disable the service.
