Label Manager

 

Label Manager adds a page to the WebGUI to easily apply container labels for services that use container labels to enable/control features. Currently, the plugin supports TSDProxy; support for Traefik is planned for a future release.

 

Usage

1. Install Label Manager from Community Applications.
2. Install TSDProxy from Community Applications.
3. In the Unraid WebGUI, open Settings -> Label Manager.
4. Select the container to configure.
5. Select the desired settings and click Apply. The container will be restarted to apply the updated labels.

This looks super cool im new to php but if im understanding this right if i wanted to expand on this. i have a few questions for you if you have some time to chat about it.

Thanks a bunch for this, makes TSDProxy a breeze! Just wanted to report a potential issue regarding the Ephemeral option. It's currently set to no on each container I've assigned it to, but the label "tsdproxy.ephemeral" doesn't get added and in the tailscale control panel, it shows as Ephemeral still.

44 minutes ago, Retribution said:

Thanks a bunch for this, makes TSDProxy a breeze! Just wanted to report a potential issue regarding the Ephemeral option. It's currently set to no on each container I've assigned it to, but the label "tsdproxy.ephemeral" doesn't get added and in the tailscale control panel, it shows as Ephemeral still.

This seems to be an issue on the Tailscale side... tsdproxy.ephemeral defaults to "no" (hence why it isn't added), and Tailscale shouldn't be adding those nodes as ephemeral (the only way that I know of to add an ephemeral node is with an ephemeral auth key, which isn't the case if you're using the web login).

 

The fix for that seems to be to restart the affected container and log in again... I've only seen it happen on the first container that is connected.

 

I'm going to open an issue upstream to see about getting a proper fix.

Restarting worked for some of the containers but three of them just kept going back in as ephemeral again. So I just manually gave those the tsdproxy.ephemeral - false label and that cleared it up at least for now. Again though, thanks a bunch for this and TSDProxy. Much appreciated!

41 minutes ago, Retribution said:

Restarting worked for some of the containers but three of them just kept going back in as ephemeral again. So I just manually gave those the tsdproxy.ephemeral - false label and that cleared it up at least for now. Again though, thanks a bunch for this and TSDProxy. Much appreciated!

I created an upstream issue regarding the behavior, and I also just released an update for Label Manager that always sets tsdproxy.ephemeral if tsdproxy is enabled.

(Previously, it wouldn't set tsdproxy.ephemeral because false is supposed to be the default, but apparently that's not working right upstream, so this should fix it as a workaround.)

Version 2025.01.15 was just released, which provides support for the LinuxServer.io SWAG auto-proxy: https://github.com/linuxserver/docker-mods/tree/swag-auto-proxy

 

Thanks to @illegal-deference8464 for their work to get this added!

I'll admit i'm still in the processs of cobnfiguyring TDS for the first time, dpot's all new to me, but TDS errors out after tds.enable: true w/

Quote

8:09PM INF request host=192.168.1.20:8888 method=GET status=200 url=/r/list
8:09PM ERR error host=192.168.1.20:8888 method=GET status=404 url=/favicon.ico
8:09PM INF Shutdown server
8:09PM INF Health check set to not ready
8:09PM INF Shutdown all proxies module=proxymanager
8:09PM INF Server was shutdown successfully

 

 

Label Manager loads blank pages for each container after clicking Edit. I imagine this is not expected behaviour?  I thought it might be a conflict with the FolderView plugin, but removing that didn't help.

 

I'm at stalemate where i'd normally give up on a niche plugim failure, but it's cuttemtly tje only resolution i have at my disposal that will potentially pass WAF and turn a bunch of things shes never logged into, into a custom defined dashboard accessible from anywhere and next time i hear "Cam u download" i interject with how about you try.She doesnt use any of the apps with bot enablement and i'm hoping i can push all that's needed to her device without managing anythnig additional but thats outside the scope of this project.

I'd be happy if i could proceed following the documentation to setup. At a complete loss for what to do next, so if anyone is feeling helpful please task me with some actions to diag/resolve!

Quote

Label Manager loads blank pages for each container after clicking Edit. I imagine this is not expected behaviour?  I thought it might be a conflict with the FolderView plugin, but removing that didn't help.

You need install TSDProxy too. I think that you need other apps to tell Label Manager the available labels

I love this! Makes configuring SWAG auto-proxy so much easier! And I can see which containers to setup to proxy too! Thank you!

21 hours ago, pcaro said:

You need install TSDProxy too. I think that you need other apps to tell Label Manager the available labels

This is accurate. 
 

You need either

• TSDProxy or
• SWAG with the auto proxy mod

Support for Traefik is in the works.
 

I’m also open to requests if there’s another service that would benefit.  

Would be cool to work with TSDproxy to support docker-compose containers (docker apps not installed through the Unraid apps screen) so they can be managed through the Label Manager UI!

To support docker-compose projects with TSDproxy, I've edited the tsdproxy.yaml to add:

files:
  critical: # Name the target provider
    filename: /config/proxies.yaml

Then in that proxies.yaml file I can add proxies. This makes them show up in TSDproxy to then authenticate to Tailscale.

invoiceshelf:
  url: http://192.168.1.3:8123
  tlsValidate: false
  tailscale:
    ephemeral: false

36 minutes ago, mytchb said:

Would be cool to work with TSDproxy to support docker-compose containers (docker apps not installed through the Unraid apps screen) so they can be managed through the Label Manager UI!

To support docker-compose projects with TSDproxy, I've edited the tsdproxy.yaml to add:

files:critical: # Name the target provider
    filename: /config/proxies.yaml

Then in that proxies.yaml file I can add proxies. This makes them show up in TSDproxy to then authenticate to Tailscale.

invoiceshelf:url: http://192.168.1.3:8123tlsValidate: falsetailscale:
    ephemeral: false

You don't need Label Manager for that, just add the proper labels to your Compose file:

https://almeidapaulopt.github.io/tsdproxy/docs/docker/

On 4/20/2025 at 10:22 PM, EDACerton said:

I’m also open to requests if there’s another service that would benefit.  

Pangolin just added support for labels, would be nice to be able to use those: https://www.reddit.com/r/selfhosted/comments/1nnry8a/pangolin_1102_declarative_configs_docker_labels/

E.g.

services:
  grafana:
    image: grafana/grafana
    container_name: grafana
    labels:
      - pangolin.proxy-resources.grafana.name=Grafana
      - pangolin.proxy-resources.grafana.full-domain=grafana.example.com
      - pangolin.proxy-resources.grafana.protocol=http
      - pangolin.proxy-resources.grafana.auth.sso-enabled=true
      - pangolin.proxy-resources.grafana.targets[0].method=http
      - pangolin.proxy-resources.grafana.targets[0].port=3000

On 4/21/2025 at 4:22 AM, EDACerton said:

This is accurate. 
 

You need either

• TSDProxy or

• SWAG with the auto proxy mod

Support for Traefik is in the works.
 

I’m also open to requests if there’s another service that would benefit.  

Any idea when Traefik support will be implemented? Thanks for this plugin! Keep up the great work!

does this support autoheal?

It stopped working after update 7.5.6

It appears that the latest version (05/10/2026) fixes the Label Manager problem.

Thank you for the plugin! I am getting stated with TSDProxy, but instead of Tailscale service I am self hosting Headscale on my server. For this to work, TSDProxy requires the scheme to be set to HTTP only. Label Manager has this option in the advanced list, but it doesn't look like it does anything. When I change to HTTP (with tlsvalidate set to false), there is no tsdproxy.scheme label created. I assume this is a bug?

Also would like to add my bambuddy container to my tailnet, but it is setup as a host network. How does the autoport detection work for containers on host networks? If I understand docker networking, setting to host opens up all ports for use for the container.

Edited June 2Jun 2 by kingbuzz0

Any reason this doesn't seem to work correctly with Unraid 7.1.4? It shows swag but not tsdproxy, and any changes I try to make are not being saved. I have attached my diagnostics.zip. I hope someone can help?

aorus-diagnostics-20260619-1352.zip