NASlab-Agent ghcr.io/tuxxler/nzblab-agent:latest https://github.com/Tuxxler/nzblab-agent/pkgs/container/nzblab-agent true 6.12.0 bridge sh false https://github.com/Tuxxler/nzblab-agent/issues https://github.com/Tuxxler/nzblab-agent https://github.com/Tuxxler/nzblab-agent#readme AGPL-3.0-only Read-only monitoring agent for the NASlab Android app. It measures your server every 30 seconds (temperature sensors, CPU load, GPU usage, RAM, network, disk spin-ups and which programs caused them, top processes, cache usage per share) and keeps a file index for searching all shares. History: 8 days at full resolution, 2 years of hourly values, stored in /config. Beta: tested on Unraid 7 (amd64); arm64 untested. It never changes anything on your server: every host path is mounted read-only, only /config is writable, root is dropped after start (PUID/PGID), and the container runs read-only with almost all capabilities removed. Optional and off by default: SMART values (NZBLAB_SMART), backup discovery for extra paths (NZBLAB_BACKUP_PATHS), redacted log excerpts (NZBLAB_LOGS), home network device list (NZBLAB_LAN). Service discovery (Sonarr, Radarr, Prowlarr, SABnzbd, Tautulli, Overseerr/Jellyseerr) reads API keys from appdata read-only and hands them to the app over the token-protected API; Plex tokens are never read; turn it off with DISCOVER_KEYS=0. The agent never updates itself. Network mode: the default Bridge works for everything. Only if you want the optional device list of your home network (NZBLAB_LAN=1) or the real network cards, switch Network Type to Host (optional) and then set Listen address to your server address. Without it, the agent only sees the Docker network. After the first start, open the container log: the line "NZBLab-Agent Token: ..." appears once. Paste the token into the app (Settings, Server connections, NASlab-Agent). The token is also stored in appdata/nzblab-agent/token.txt. A read-only browser dashboard runs on port 8099. Do not expose this port to the internet; use a VPN (WireGuard, Tailscale) when away from home. License: the agent is free and open source (GNU AGPL-3.0-only), source code on GitHub. The NASlab app is a separate, closed-source Android app (Google Play). Deutsch: Misst Temperaturen, CPU, Grafikchip, RAM und Plattenzugriffe rund um die Uhr für die NASlab-App. Nur lesen, ändert nichts am NAS. Den Token zeigt das Container-Log beim ersten Start einmal, danach steht er in appdata/nzblab-agent/token.txt. Tools:System nzblab naslab monitoring temperature smart disk spin-up android app http://[IP]:[PORT:8099]/ https://raw.githubusercontent.com/Tuxxler/unraid-templates/main/templates/nzblab-agent.xml https://raw.githubusercontent.com/Tuxxler/unraid-templates/main/icons/nzblab-agent.png --memory=512m --cpus=1 --read-only --tmpfs /tmp --security-opt no-new-privileges:true --cap-drop=ALL --cap-add=CHOWN --cap-add=DAC_OVERRIDE --cap-add=FOWNER --cap-add=SETUID --cap-add=SETGID 1.19.2: fixes and hardening, no new settings. 1.19.0: host check for /api/ping and /api/health (new setting NZBLAB_HOSTS for VPN or own domain names), shorter token errors, ntfy shows program names only to a server in your home network. 1.18.0: ntfy sends only critical alerts by default (NZBLAB_NTFY_ALL=1 for all), home network device search is off by default (NZBLAB_LAN=1 turns it on), syslog content only with NZBLAB_LOGS=1, security audit fixes. 1.17.0: sensor limits from hwmon, Synology disk names (sata1...), mover state from the system log (only with log excerpts on). 1.16.1: token hardening (min. 32 characters), crashes endpoint needs the token, parser limits. 1.16.0: service discovery (Sonarr, Radarr, Prowlarr, SABnzbd, Tautulli, Overseerr) for one-step setup in the app. 1.15.0: reboot history, per-disk temperatures, RAID/pool status, network latency, backup discovery, optional SMART and log excerpts. The NASlab Android app (Google Play). Unraid 6.12 or newer. 8099 /mnt/user/appdata/nzblab-agent /mnt/user /mnt/cache /sys /proc /tmp/notifications Europe/Zurich 99 100 95 0 0 1 1 0 0 0 0.0.0.0