IronBeardKnight

So no luck on this front I feel like i have tried everything and this container is just broken. if I go local navigation I get this https crap even after allowing insecure in chrome flags and even enabling insecure auth in the .json file. Then to get around this I pushed local dns record to traefik with no middleware so its basically untouched apart from encrypting into ssl, and after adding trusted proxy and trusted device ip's and domain names I get this device signature crap I have tried clearing every known cache and cookie, tried a new browser and even incognito mode but nothing works I get stuck at either of these two being https or device signature. I never thought this would be so hard to setup I mean I have heard people complain about its security levels but I have not even gotten it to work, seems like the best security level is already baked in (Not Working) I would greatly appreciate any further guidance on this matter team otherwise I think it will just be binned and ill try another project

Thank you very much FlynDice I will give it another shot when I get home after work

I cannot seem to get this container to work properly, I have tried to get this working with local ollama container through enviroment variables but that did not work so tried running stock with gateway token and then running command for setup wizard after that adding in allowed proxies and domains which I added the local ip and also the domain that is being used through traefik to have it running as ssl encrypted to get passed the ssl warning on the dashboard but I just cannot get through to the dashboard at all even using the token id in the url path connect button does nothing at all. Also the container is acting very very slow in terms of the setup wizard via cli. if someone has gotten openclaw with ollama locally working I would love a config file and story of how you have set yours up, much appreciated in advance. Cheers team.

I don't believe that any of the power settings are actually working now since unraid has a native power profile changer it seems. Is there any way to disable the native power changer as its very primitive compared to this plugin and its ability to schedule and limit clock speed in power savings mode which now also seems to be missing. since unraid did this my power consumption has increased by over 100w now that I cannot clock limit of a night

@KluthR It looks like the grouping function isn't working correclty, When I double click it does not show me a list to select from.

Has anyone actually gotten Netbird to work at all in a secure way? Hosting a Coturn server with ports open is kind of counter intuitive imo unless there is a way to sit it behind something like cloudflare tunnel and traefik. I would love if someone could point me in direction of a guide of sorts as I have authentik configured for the dashboard but after that point the managment.json and the coturn.conf file have me stumped. The docker version seems to have ./configure.sh which does it all for you apparently is that not a thing in unraid?

Thank you for the reply on this one appreciate it. My setup is a little different than yours in that I'm using authentik and want to use authentik but everything sitting behind traefik and I"m finding it hard in my brain to convert your guide to my needs is all. I have managed to have the json recognized by the container but the log output is very strange as in it looks to have returned some html data and the container just stops.

I have to say guys I'm super lost trying to set this up with anything other than keycloak as the different docker containers make it quite confusing to push through traefik not to mention that the management container does not generate the managment.json file at all it just creates a folder I seem to get nothing but some type of html error in the logs from the managment container. When I try pass env variables like the normal container would take and then pass to the setup.env it does nothing and to be honest configuring the managment.json manually is confusing to say the least when trying to figure out I have tried following your guide to the best of my ability but but it leaves quite a bit to be desired as the coturn container also does not generate a config sample file so you have to get it from the git repo. Feeling more than a bit lost to be honest with these containers. Would love to see a youtube video on someone setting it up or something especially with Authentik

Hi @jimrummy101, First of all Thank you so much for creating these containers. After trying for days to get a tailscale client even as a exit node the way I need it using headscale and having both of them communicating in docker I had just about given up trying to get it to behave like I wanted on unraid as client communication seemed to be not working at all even though they where connected to the management server headscale. I cam across netbird and although I haven't yet gotten it working for the below questions and reasons (if you you could entertain me it would be appreciated) as long as it can do split dns tunneling I'm hoping it will prove more promising as a solution. I am NOT trying to use this solution to access my unraid server directly but more it as a standalone container that would then sit inside a vlan which is firewall segregated with only holes to game servers allowed as I would then have my trusted friends able to play on my servers and I don't have to expose my game servers and ip directly to the public as you cannot mask your ip to game servers (dockized) easily or effectively without spending money. Think of it like a secure gaming lan setup that allows only specific games to travers the wireguard network and there other traffic does not go through my network keeping them private and my bandwidth in tact in case they do downloading etc. I'm currently finding like headscale and tailscale solution I attempted above does not have enough information unfortunately. Even I struggle and i have been doing unraid, docker and vms for over 10 years it feels like. Explanations as to why at lease i'm a little confused: . why coturn is needed (not what it is as thats easy enough to find https://www.youtube.com/watch?v=4dLJmZOcWFc), if you should self host coturn, how to secure coturn if possible or if its better to have coturn sitting in a dmz or vps somewhere offsite. . why keycloak is even needed and or if you can just exclude keycloakl from the docker variables and the json and sit the ui behind Authelia / Authentic instead for those that find oauth2 or oidc difficult to understand this one may be a little harder to explain without partially explaining Authelia/Authentic etc workings. . what specificly do these things even mean: NETBIRD_AUTH_AUDIENCE="<OAUTH_CLIENT_ID>" NETBIRD_AUTH_CLIENT_ID="<OAUTH_CLIENT_ID>" NETBIRD_AUTH_CLIENT_SECRET="<OAUTH_CLIENT_SECRET>" Explaining like you would to a 6 year old in descriptions to the individual paths and variables will upskill the wider user base much faster than fumbling through documentation that wasn't initially designed for unraid or docker or relies on other software specificly. Just some suggestions from someone that has what feels like wasted days on this solution of both and never turned up with a working solution. Now for some of my own questions Could you please advise if your able to take the docker client you made and segrigate it with its own ip in a vlan not using host for the network type? Very much appreciate for your time on this in advance.

Hey guys having this issue trying to get the container started have used the documentation and template to get the xml with MySQL db backend also using ChatGPT for some rough Gutenberg and having no luck as I keep getting the below. text error warn system array login at java.base/jdk.internal.util.xml.impl.Parser.ent(Parser.java:1994) at java.base/jdk.internal.util.xml.impl.Parser.step(Parser.java:471) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:477) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:411) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:374) at java.base/jdk.internal.util.xml.impl.SAXParserImpl.parse(SAXParserImpl.java:97) at java.base/jdk.internal.util.xml.PropertiesDefaultHandler.load(PropertiesDefaultHandler.java:83) ... 19 more 2024-02-23 22:53:04 ERROR: Main method error - - SAXParseException (... < Config:46 < <gener:-1 < *:-1 < ... < Main:116 < ...) Exception in thread "main" java.lang.RuntimeException: com.google.inject.CreationException: Unable to create injector, see the following errors: 1) [Guice/ErrorInjectingConstructor]: RuntimeException: Configuration file is not a valid XML document at Config.<init>(Config.java:42) at MainModule.configure(MainModule.java:116) while locating Config Learn more: https://github.com/google/guice/wiki/ERROR_INJECTING_CONSTRUCTOR 1 error ====================== Full classname legend: ====================== Config: "org.traccar.config.Config" MainModule: "org.traccar.MainModule" ======================== End of classname legend: ======================== at org.traccar.Main.run(Main.java:146) at org.traccar.Main.main(Main.java:110) Caused by: com.google.inject.CreationException: Unable to create injector, see the following errors: 1) [Guice/ErrorInjectingConstructor]: RuntimeException: Configuration file is not a valid XML document at Config.<init>(Config.java:42) at MainModule.configure(MainModule.java:116) while locating Config Learn more: https://github.com/google/guice/wiki/ERROR_INJECTING_CONSTRUCTOR 1 error ====================== Full classname legend: ====================== Config: "org.traccar.config.Config" MainModule: "org.traccar.MainModule" ======================== End of classname legend: ======================== at com.google.inject.internal.Errors.throwCreationExceptionIfErrorsExist(Errors.java:589) at com.google.inject.internal.InternalInjectorCreator.injectDynamically(InternalInjectorCreator.java:190) at com.google.inject.internal.InternalInjectorCreator.build(InternalInjectorCreator.java:113) at com.google.inject.Guice.createInjector(Guice.java:87) at com.google.inject.Guice.createInjector(Guice.java:69) at com.google.inject.Guice.createInjector(Guice.java:59) at org.traccar.Main.run(Main.java:116) ... 1 more Caused by: java.lang.RuntimeException: Configuration file is not a valid XML document at org.traccar.config.Config.<init>(Config.java:64) at org.traccar.config.Config$$FastClassByGuice$$9a3fc4.GUICE$TRAMPOLINE(<generated>) at org.traccar.config.Config$$FastClassByGuice$$9a3fc4.apply(<generated>) at com.google.inject.internal.DefaultConstructionProxyFactory$FastClassProxy.newInstance(DefaultConstructionProxyFactory.java:82) at com.google.inject.internal.ConstructorInjector.provision(ConstructorInjector.java:114) at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:91) at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300) at com.google.inject.internal.ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40) at com.google.inject.internal.SingletonScope$1.get(SingletonScope.java:169) at com.google.inject.internal.InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45) at com.google.inject.internal.InternalInjectorCreator.loadEagerSingletons(InternalInjectorCreator.java:213) at com.google.inject.internal.InternalInjectorCreator.injectDynamically(InternalInjectorCreator.java:186) ... 6 more Caused by: java.util.InvalidPropertiesFormatException: jdk.internal.org.xml.sax.SAXParseException; at java.base/jdk.internal.util.xml.PropertiesDefaultHandler.load(PropertiesDefaultHandler.java:85) at java.base/java.util.Properties.loadFromXML(Properties.java:986) at org.traccar.config.Config.<init>(Config.java:46) ... 17 more Caused by: jdk.internal.org.xml.sax.SAXParseException; at java.base/jdk.internal.util.xml.impl.ParserSAX.panic(ParserSAX.java:652) at java.base/jdk.internal.util.xml.impl.Parser.ent(Parser.java:1994) at java.base/jdk.internal.util.xml.impl.Parser.step(Parser.java:471) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:477) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:411) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:374) at java.base/jdk.internal.util.xml.impl.SAXParserImpl.parse(SAXParserImpl.java:97) at java.base/jdk.internal.util.xml.PropertiesDefaultHandler.load(PropertiesDefaultHandler.java:83) ... 19 more

Hey guys having this issue trying to get the container started have used the documentation and template to get the xml with MySQL db backend also using ChatGPT for some rough Gutenberg and having no luck as I keep getting the below. text error warn system array login at java.base/jdk.internal.util.xml.impl.Parser.ent(Parser.java:1994) at java.base/jdk.internal.util.xml.impl.Parser.step(Parser.java:471) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:477) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:411) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:374) at java.base/jdk.internal.util.xml.impl.SAXParserImpl.parse(SAXParserImpl.java:97) at java.base/jdk.internal.util.xml.PropertiesDefaultHandler.load(PropertiesDefaultHandler.java:83) ... 19 more 2024-02-23 22:53:04 ERROR: Main method error - - SAXParseException (... < Config:46 < <gener:-1 < *:-1 < ... < Main:116 < ...) Exception in thread "main" java.lang.RuntimeException: com.google.inject.CreationException: Unable to create injector, see the following errors: 1) [Guice/ErrorInjectingConstructor]: RuntimeException: Configuration file is not a valid XML document at Config.<init>(Config.java:42) at MainModule.configure(MainModule.java:116) while locating Config Learn more: https://github.com/google/guice/wiki/ERROR_INJECTING_CONSTRUCTOR 1 error ====================== Full classname legend: ====================== Config: "org.traccar.config.Config" MainModule: "org.traccar.MainModule" ======================== End of classname legend: ======================== at org.traccar.Main.run(Main.java:146) at org.traccar.Main.main(Main.java:110) Caused by: com.google.inject.CreationException: Unable to create injector, see the following errors: 1) [Guice/ErrorInjectingConstructor]: RuntimeException: Configuration file is not a valid XML document at Config.<init>(Config.java:42) at MainModule.configure(MainModule.java:116) while locating Config Learn more: https://github.com/google/guice/wiki/ERROR_INJECTING_CONSTRUCTOR 1 error ====================== Full classname legend: ====================== Config: "org.traccar.config.Config" MainModule: "org.traccar.MainModule" ======================== End of classname legend: ======================== at com.google.inject.internal.Errors.throwCreationExceptionIfErrorsExist(Errors.java:589) at com.google.inject.internal.InternalInjectorCreator.injectDynamically(InternalInjectorCreator.java:190) at com.google.inject.internal.InternalInjectorCreator.build(InternalInjectorCreator.java:113) at com.google.inject.Guice.createInjector(Guice.java:87) at com.google.inject.Guice.createInjector(Guice.java:69) at com.google.inject.Guice.createInjector(Guice.java:59) at org.traccar.Main.run(Main.java:116) ... 1 more Caused by: java.lang.RuntimeException: Configuration file is not a valid XML document at org.traccar.config.Config.<init>(Config.java:64) at org.traccar.config.Config$$FastClassByGuice$$9a3fc4.GUICE$TRAMPOLINE(<generated>) at org.traccar.config.Config$$FastClassByGuice$$9a3fc4.apply(<generated>) at com.google.inject.internal.DefaultConstructionProxyFactory$FastClassProxy.newInstance(DefaultConstructionProxyFactory.java:82) at com.google.inject.internal.ConstructorInjector.provision(ConstructorInjector.java:114) at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:91) at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:300) at com.google.inject.internal.ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40) at com.google.inject.internal.SingletonScope$1.get(SingletonScope.java:169) at com.google.inject.internal.InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:45) at com.google.inject.internal.InternalInjectorCreator.loadEagerSingletons(InternalInjectorCreator.java:213) at com.google.inject.internal.InternalInjectorCreator.injectDynamically(InternalInjectorCreator.java:186) ... 6 more Caused by: java.util.InvalidPropertiesFormatException: jdk.internal.org.xml.sax.SAXParseException; at java.base/jdk.internal.util.xml.PropertiesDefaultHandler.load(PropertiesDefaultHandler.java:85) at java.base/java.util.Properties.loadFromXML(Properties.java:986) at org.traccar.config.Config.<init>(Config.java:46) ... 17 more Caused by: jdk.internal.org.xml.sax.SAXParseException; at java.base/jdk.internal.util.xml.impl.ParserSAX.panic(ParserSAX.java:652) at java.base/jdk.internal.util.xml.impl.Parser.ent(Parser.java:1994) at java.base/jdk.internal.util.xml.impl.Parser.step(Parser.java:471) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:477) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:411) at java.base/jdk.internal.util.xml.impl.ParserSAX.parse(ParserSAX.java:374) at java.base/jdk.internal.util.xml.impl.SAXParserImpl.parse(SAXParserImpl.java:97) at java.base/jdk.internal.util.xml.PropertiesDefaultHandler.load(PropertiesDefaultHandler.java:83) ... 19 more

As very long user of unraid and someone who has brought on many customers with home servers I think its great your looking at ways to bring money back into your company to increase your feature profile and the stability of the product. I don't however believe that charging customers for security updates of which many are in fact bug fixes should be in any part of an update or subscription based model and that to me should be simply protested out of existence, however if your introducing a completely now way of doing security or an implementation that increases security giving features and benefits not just fixing the bugs you missed in your previous release then this may be ok. Example: Ok to pay: Introduced new version of docker and have take some of those features and created new unraid unique features NOT OK TO PAY The community has raised an issue with the you that for example the docker driver your using has been implemented incorrectly and to fix it you should make a default config change. That in my opinion is not something you should be allowed to charge your community for. We as Unraiders never want to be put in a position where we feel like we are being charged to be the beta testers for your product. A very clear and in dept explanation per update is going to have to be given in your change logs to justify update price but charging a heavy fee for something like a docker or some other third party applications hard work is not something ill ever pay for and would probably end up moving to a different software. In this example I understand that work may need to be done to integrate with a new system but for me to pay for it I would like to know what I'm truly paying for. In a digital world where security is of upmost importance and I think if your going to truly tackle security issues and even ones other third party companies or containers that have been neglected for so long and you can justify that then sure the price may be right. I personally would love to seen docker image inspection features like what wiz or Prisma do obviously not as advanced but stuff that lets me know if the dockers i'm running are vulnerable or have out of date libraries being used or trigger CVE's and give me a runtime option to fix these issues. That is the type of security features I expect to see for upgrade prices not just other peoples hard work. Otherwise where this goes remains to be seen and I can only hope this leads a product I love to even greater heights.

anyone have any information on enabling cuda on the new version just being released as it appears that they have gotten rid of any inkling that the separate tensort models are still needed or not. I have just added the additional variable to the container for "cuda" to be added however not sure its actually doing anything. As the immich documentation only pertaining to running it normally through docker i'm not sure if I should need to map the docker config files to my local system in unraid so I can persistently edit them in accordance with immich documentation. Any information for fellow immich users is greatly appreciated as its a fantastic application.

Yes