The core Docker template editor (dockerMan) is part of Unraid’s built-in code. There is no clean public plugin hook that lets you intercept every environment variable field, resolve op:// references on the fly while the user is filling out the form, and keep the reference stored in the template while injecting the value only at create/update time. To get true “type op://... in the Value field and it just works” behaviour you would need one of: Deep (and fragile) patching/monkey-patching of the template PHP/JS A completely parallel “Secrets-aware Add/Edit Container” UI that bypasses the stock form Cooperation from Lime Technology to add an official secrets provider interface Alternatives, which I am really not sure if I am happy with personally would be a plugin that somehow expands on the Compose Manager Plus plugin. And have op run wrap the docker compose and I think there could be something there to explore. This is not ideal. The best scenario would be built in secrets manager support for different password managers.