qm-socket-proxy ghcr.io/lewlew-glitch/qm-companion-socket-proxy:latest https://github.com/lewlew-glitch/qm_companion/pkgs/container/qm-companion-socket-proxy bridge sh false https://raw.githubusercontent.com/lewlew-glitch/qm_companion/main/src/assets/logo.png Dedicated authenticated Docker API proxy required by Quartermaster Companion. It keeps the Docker socket out of the main application and does not publish a host port. https://github.com/lewlew-glitch/qm_companion https://raw.githubusercontent.com/lewlew-glitch/qm_companion/main/templates/qm-socket-proxy.xml https://raw.githubusercontent.com/lewlew-glitch/qm_companion/main/docs/unraid.md Tools:System quartermaster docker socket proxy Install before qm-companion. Keep the container name, do not publish port 2375 and use the same QM_PROXY_KEY in both templates. MIT --restart=unless-stopped --read-only --cap-drop=ALL --security-opt=no-new-privileges --tmpfs=/tmp:size=4m,mode=1777 --tmpfs=/run:size=1m,mode=0755 --label=qm.protected=true