mr1beast

Unraid SecretGuard SecretGuard helps protect credentials stored in Unraid Docker templates. Unraid Docker templates are stored on the USB flash device. Passwords, API keys, tokens and other credentials configured as environment variables may therefore be stored in plaintext XML. SecretGuard detects likely credentials and lets you move selected values to protected storage without displaying the secret values in its interface. Features • Scans currently installed Docker container templates • Detects likely passwords, API keys, tokens and other credentials • Never displays detected secret values • Plain ENV storage on persistent storage • Encrypted Vault mode • Dedicated SecretGuard share support • Detects encrypted and non-persistent storage • Removes protected variables from Docker XML • Automatically recreates containers after migration • Variable-level rollback • Vault lock/unlock lifecycle • Master password change support • Unlock rate limiting • Unraid notifications and template watcher • Native Unraid plugin update support Security Plain ENV is intended primarily for encrypted persistent storage. Encrypted Vault protects SecretGuard-managed credential files at rest and requires the master password after reboot. SecretGuard does not replace host security. Docker and users with root access to an unlocked server may still be able to access credentials required by running containers. The Vault master password is not stored. There is no password recovery or backdoor. Status SecretGuard is currently Public Beta. Test migrations on a non-critical container first and keep a backup of important configuration. Support and bug reports Development, bug reports and feature requests are handled through GitHub Issues: GitHubIssues · mr1beast/unraid-secretguardSecret management and migration plugin for Unraid Docker containers - Issues · mr1beast/unraid-secretguardPlease do not include passwords, API keys, tokens, environment files or other secrets in issue reports. GitHub https://github.com/mr1beast/unraid-secretguard Manual installation https://raw.githubusercontent.com/mr1beast/unraid-secretguard/main/unraid-secretguard.plg