curtain ggarden/curtain:latest https://hub.docker.com/r/ggarden/curtain bridge sh false https://github.com/ggardenhire/curtain/issues https://github.com/ggardenhire/curtain curtain is a public-facing, read-only dashboard for your Unraid server. It shows visitors a curated, admin-approved view: live metrics (CPU load, memory, uptime, disk), a storage breakdown pie, quick links to your public services, and optionally posters for the three most recently added movies. SECURITY: curtain is intentionally UNAUTHENTICATED - treat everything it serves as public. It is read-only by design (no write/control endpoints), reads only the specific env vars you set (an allowlist - it never enumerates the environment), and sees only the host paths you bind-mount READ-ONLY. Run it non-root with no added capabilities (this template does). Only mount what you are comfortable exposing, and do not expose it to the internet without a reverse proxy you trust. Tools: Network:Web Status: http://[IP]:[PORT:1939]/ https://raw.githubusercontent.com/ggardenhire/curtain/main/unraid/curtain.xml https://raw.githubusercontent.com/ggardenhire/curtain/main/client/public/curtain.png --read-only --cap-drop=ALL --security-opt=no-new-privileges 1939 curtain /data/movies /data/movies Movies /data/movies Shows /data/shows /mnt/user/data/media/movies /mnt/user/data/media/shows