infisical-aio jsonbored/infisical-aio:latest https://hub.docker.com/r/jsonbored/infisical-aio bridge sh false https://github.com/JSONbored/infisical-aio/issues https://github.com/JSONbored/infisical-aio Infisical is an open-source secrets management platform for teams, infrastructure, and application credentials. [b]All-In-One Unraid Edition[/b] `infisical-aio` wraps the official Infisical container and bundles the required PostgreSQL and Redis services into one Unraid-first install path. It also includes a bundled Mailpit inbox so default startup and local email-dependent flows work without forcing a real SMTP relay on day one. That keeps the beginner setup small while still exposing the wider upstream configuration surface in Advanced View. [b]Quick Install (Beginners)[/b] 1. Install the template and keep the default `/config` and `/data` paths unless you have a reason to move them. 2. Set [code]SITE_URL[/code] to the real URL users will visit, such as [code]https://secrets.example.com[/code] or [code]http://tower.local:8080[/code]. 3. Start the container. The wrapper will auto-generate and persist [code]ENCRYPTION_KEY[/code] and [code]AUTH_SECRET[/code] if you leave them blank, and bundled Mailpit inbox UI credentials will be stored in [code]/config/aio/generated.env[/code]. Publish [code]Local Mail Inbox Port[/code] only when you intentionally need host-network inbox access. 4. Either create the first account in the UI, or fill the optional [code]AIO_BOOTSTRAP_*[/code] fields in Advanced View to bootstrap the first admin and organization automatically. [b]Power Users (Advanced View)[/b] - Advanced View exposes the broader Infisical self-hosting environment surface, including SMTP, SSO, audit logging, telemetry, secret scanning, app connections, gateway/PAM controls, and expert network/security knobs. - Leave [code]DB_CONNECTION_URI[/code] and [code]REDIS_URL[/code] blank for the easiest bundled path. Set them only if you want to use external PostgreSQL or Redis instead of the embedded services. - Leave [code]SMTP_HOST[/code] blank for the bundled local Mailpit inbox, or point it at a real external SMTP server if you do not want the bundled inbox. - If you enable Prometheus metrics export, publish the optional [code]9464[/code] metrics port in Advanced View so your scraper can reach it. [b]Important Notes[/b] - The default AIO path embeds PostgreSQL and Redis for convenience. That is simpler for first boot, but it is not the same as a highly available production deployment. - Infisical itself recommends external high-availability PostgreSQL and Redis for more serious production deployments. - The bundled Mailpit inbox is for local or lab use. It is not a production mail relay and should not be confused with real deliverability infrastructure. - [code]SITE_URL[/code] matters. If you set it wrong, browser flows, links, email behavior, and some integrations will break in subtle ways. - If you enable automatic bootstrap, you are creating a highly privileged instance-admin identity during first boot. Treat those credentials carefully. ### 2026-05-31 - Generated from CHANGELOG.md during release preparation. Do not edit manually. - Update upstream pins for infisical-aio Security Tools:Utilities http://[IP]:[PORT:8080] https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/infisical-aio.xml https://github.com/JSONbored/infisical-aio#readme https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/icons/infisical.png secrets manager vault devops credentials certificates pki pam secret scanning self-hosted Use a correct public or LAN [code]SITE_URL[/code] and back up both your PostgreSQL data and the persisted [code]ENCRYPTION_KEY[/code]. For larger or higher-availability deployments, move PostgreSQL and Redis out of the bundled container and use the advanced external override fields. https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/infisical-aio/01-login.png https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/infisical-aio/02-dashboard.png https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/infisical-aio/03-project.png Support JSONbored on GitHub Sponsors. https://github.com/sponsors/JSONbored bridge 8080 8080 tcp 8025 tcp /mnt/user/appdata/infisical-aio/config /config rw /mnt/user/appdata/infisical-aio/data /data rw 8080 /mnt/user/appdata/infisical-aio/config /mnt/user/appdata/infisical-aio/data http://tower.local:8080 false true false false false true true false true false true true false false true false false false false false false