Unraid Secretary Office

Free & open source · a plugin for Unraid 7

A small office for your Unraid server

A team of characters, each looking after one part of your server — snapshots, the nightly backup, restores, logs, security, tidying up. They tell you what they noticed and, where it makes sense, let you act on it. You just ask.

Runs on your own server · GPL-3.0-or-later · five languages

  • The Team Lead
  • Ms. Dustdevil
  • Mr. Backupsy
  • Ms. Snapshotini
  • Mr. Restori
  • Ms. Protocolli
  • The Night Watchman
  • Jack Emby
  • The Consultant
The office's reception in Unraid: a card for each desk — the Team Lead, Ms. Snapshotini, Ms. Dustdevil, Mr. Backupsy, Mr. Restori, Ms. Protocolli, the Night Watchman and the Consultant — each with a speech bubble saying what they noticedThe office's reception in Unraid: a card for each desk — the Team Lead, Ms. Snapshotini, Ms. Dustdevil, Mr. Backupsy, Mr. Restori, Ms. Protocolli, the Night Watchman and the Consultant — each with a speech bubble saying what they noticed

Why an office?

What usually gets in the way of looking after a server — and how it goes with the office.

  • Usually: A plugin here, a script there, each with a page of its own

    With the office: One office in Unraid’s menu bar — everyone at their desk, one place to ask

  • Usually: Backups nobody ever tried to bring back

    With the office: A restore drill proves on throwaway copies that they come back

  • Usually: A restore worked out under pressure, from scratch

    With the office: Mr. Restori shows first exactly what will happen — and never deletes what he replaces

  • Usually: Tidying up means guessing what is still in use

    With the office: Ms. Dustdevil finds what nobody uses and puts it in a storeroom first — nothing is thrown away at once

  • Usually: Changes on the server go unnoticed

    With the office: The Night Watchman learns what is normal and tells you only what is different

  • Usually: Logs you scroll through alone

    With the office: Ms. Protocolli counts and groups what sounds like an error or a warning

  • Usually: Every check wakes the sleeping disks

    With the office: Sleeping disks stay asleep unless you ask

  • Usually: Someone else’s cloud, an account, a subscription

    With the office: Your own server, behind Unraid’s login — free, open source

Meet the team

A fresh office has only the Team Lead. He asks around who would suit your server — no Emby, no Jack Emby; no ZFS or btrfs, no snapshots — and you hire whom you need, or let them go again later; their data and settings stay.

The Team Lead always there

Leads the team — whom to hire, what the office needs from your server, and what’s left for you to do

Collects what every desk needs and lists what is missing — still to do, recommended, good to know — each with a link into Unraid. Pairs your office with a partner office. Read only.

Ms. Dustdevil

Knows every corner of the server and sees dust in all of them — tidies up, but never throws anything away at once

Where is what: shares, containers, VMs, disks, plugins, and advice on keeping things in order. Tidying up: templates, appdata folders and VM leftovers nobody uses — into a storeroom you can put back from. Gives containers without a picture a logo.

Mr. Backupsy

Looks after the nightly backup — a bit scatterbrained and anxious, so he checks everything three times

Runs the office’s backup engine: consistent snapshots, database dumps, a package per app and VM, Kopia offsite, partner offices. Set up in the browser — he reads the server and proposes, you decide.

Ms. Snapshotini

Italian by birth — keeps an eye on every snapshot: ZFS, btrfs and VMs. Con amore.

Create, delete with an estimate of the space freed, rename, hold, unmount. Schedules with a simple retention that only ever clears away her own snapshots — and they run even when the office isn’t open.

Mr. Restori

Brings back what is gone — careful as a restorer in white gloves

Per app and VM: what can come back from where, with dates. Brings back databases, folders, whole shares, templates and VM configurations himself — and practises it in his drill. «Piano, piano.»

Ms. Protocolli

Reads every log out loud — sadly she understands none of it

The office’s logs, Unraid’s, every User Script and every container: live like tail -f, filtered, copied or downloaded. Her tour counts what sounds like an error and how full /var/log is. Read only.

The Night Watchman

The office’s security: how it stands, and what is different from normal

Tips on what he would set differently, and a watch book: new logins, changed containers and plugins, the flash, cron lines, unusual data flow, snapshots gone. Every five minutes, also with the office closed. Read only.

Jack Emby

Intern and film fan — fetches coffee, entertains everyone and gets ready what you’ll watch next

Looks after helmi1987’s EmbyCache — what you are about to watch goes to the fast pool so the array disks can sleep — and «Consolidate folders», which brings each film folder together on one disk.

The Consultant

From outside — knows the externals the office relies on, and how to get them in

Fix Common Problems, Files Viewer, Kopia, Stream Viewer, and monitoring with Prometheus and Grafana if you like: what they are good for and how to install them — or he does it, with a preview first.

Backups that come back

Mr. Backupsy runs the backup every night; Mr. Restori proves that it comes back. Between them, every app and VM knows where its copies are.

Every night, on schedule

What a run is doing right now and when it will be done, how the last nights went. Stop the array and a run stops cleanly at once — the next one continues.

Consistent snapshots

ZFS and btrfs snapshots as the base of every night. Which containers stop for them is part of the setup; VMs are held for the moment of the snapshot.

A package per app and VM

Templates or compose files, database dumps, consistent copies of the databases of media servers that keep running; for a VM its XML, NVRAM and TPM state. Nextcloud goes into maintenance mode meanwhile.

Kopia offsite

Small and important first: the flash, the apps, then the shares and VMs. The Consultant sets up the repository if you like — with S3 Object Lock against ransomware where your bucket offers it.

Partner offices

Two servers with the office copy their nights to each other through a door: only the ZFS blocks changed since the last night, always encrypted on the way. The sender can never delete anything at the partner.

Set up in the browser

He reads the server and proposes, with reasons — you change what you like and apply. Whatever turns up later stays local and keeps running until you decide.

The restore drill: proof, not hope

Monthly, right after a nightly backup that went well (or weekly, or when you press Practise now…), Mr. Restori proves on throwaway copies that what Mr. Backupsy keeps really comes back — and writes down per app and VM which level is proven, from which copy, and when.

  • Every package read in full; database dumps played into throwaway containers of the same image — no network, no ports, nothing of the app.
  • From Kopia, each source’s newest snapshot checked and a sample streamed back and compared with the local snapshot it was made from.
  • Never wakes a disk, never runs during a parity check, ends well before the next backup, and cleans up after itself.

No warranty for your backups either. The office does its best, but a backup can be faulty or incomplete. You stay responsible for your data: test a restore now and then, and keep more than one copy — for example 3-2-1: three copies, on two kinds of storage, one of them off site.

Finds anything, fits in anywhere

The office lives inside Unraid’s web UI and looks like it.

  • The search: ⌘K / Ctrl+K

    Finds a desk, a section, a setting, a guide — and what the desks know right now: a share, an app, a VM, an entry of the watch book. In all five languages at once, forgiving a typo.

  • Five languages

    English, German, Italian, French and Spanish — your browser’s. Where it tells you what to click in Unraid, it names Unraid’s menus as Unraid shows them.

  • Unraid’s four themes

    Black, white, azure or gray — the office takes Unraid’s. A switch at the reception can keep it light or dark for your browser.

  • On the phone, too

    The pages fit a phone’s width — a look at last night’s backup works from the sofa, too.

The search open over the reception: typing «Partn» finds the Team Lead’s partner offices, a term Ms. Snapshotini explains, a tile of Ms. Dustdevil, a guide of the Consultant and items of the Night Watchman and Ms. ProtocolliThe search open over the reception: typing «Partn» finds the Team Lead’s partner offices, a term Ms. Snapshotini explains, a tile of Ms. Dustdevil, a guide of the Consultant and items of the Night Watchman and Ms. Protocolli

The page shows, the agent works

The office is an Unraid plugin: a page in Unraid’s menu bar, in Unraid’s look, behind Unraid’s login — and a small service of the plugin that does the work on the host.

  1. Your browser

    The office’s page

    Shows what the desks know and asks before anything changes. Every change carries Unraid’s CSRF token.

  2. Unraid’s web server

    A mailbox

    The page drops a request into a mailbox folder and rings the agent’s doorbell — a pipe in RAM — so the agent looks at once.

  3. On the host

    The agent

    Accepts only the actions the desks define, checks each against a fresh look at the system, runs commands without a shell.

It starts with the array and stops within seconds when the array stops — it never holds it up. While the array is stopped, the Night Watchman keeps watch from RAM and the flash.

Careful by design

  • Behind Unraid’s login. Only whoever is logged in to Unraid gets in, and other web pages in your browser can’t trigger anything. No login of its own, no account anywhere.
  • Looks before it touches. Many desks only read. Before anything changes, the office shows what will happen and asks. What a restore replaces is put aside, what is tidied up goes to a storeroom — nothing is deleted at once.
  • Stays on your server. No cloud of ours. Copies leave the server only where you send them: to your own Kopia storage, or to a partner office you paired.
  • Only what the desks define. The agent can do what root can — that is what it is for — but it only offers the actions listed in the desks’ code.
  • Open source. GPL-3.0-or-later — every line is on GitHub.

Up and running in minutes

  1. Install the plugin

    In Unraid: Plugins → Install Plugin, paste the address below and press Install.

  2. Open the office

    Sekretariat in Unraid’s menu bar, between Apps and Tools — under ⋯ → Entry in Unraid you can give it another name or place.

  3. Hire your team

    The Team Lead welcomes you and suggests whom to hire. For backups: Mr. Backupsy → Set up…, then Schedule….

https://github.com/dropnook/UnraidSecretaryOffice/releases/latest/download/unraid-secretary-office.plg

Unraid 7.3.2 or a newer 7.x. Older versions are refused at install. Unraid 8 is not supported for now — support follows once it is released and tested. Updates come like any plugin’s, under Plugins; your data stays.

Full guide on GitHub

The office is free and complete — nothing is locked, now or later. If it is useful to you, a tip is welcome; a share goes to helmi1987, who wrote Jack Emby’s tools.

Questions

Is it free?

Yes — free and open source under the GPL-3.0-or-later, and complete: nothing is locked, now or later. A tip is welcome; the supporter key you get for it unlocks nothing, it just says thank you.

Which Unraid versions does it run on?

Unraid 7.3.2 or a newer 7.x — it was built and tested on 7.3.2, and older versions are refused at install. Unraid 8 is not supported for now; support follows once it is released and tested.

Does anything go to a cloud?

No. The office runs on your server, behind Unraid’s login, with no account anywhere. Backups leave the server only where you set them up: Kopia to your own storage, or a partner office you paired.

Do I have to hire the whole team?

No. A fresh office has only the Team Lead. He suggests who would suit your server, you hire whom you need — and you can let them go again later; their data and settings stay.

Will it wake my sleeping disks?

No, not unless you ask — for example when you want the size of an array share measured. A pool whose disks sleep at night can even be left asleep by the nightly backup, if you choose so in the setup.

So are my backups safe now?

The office does its best — and the restore drill proves regularly that what it keeps comes back. But a backup can still be faulty or incomplete, and there is no warranty. Test a restore now and then and keep more than one copy, for example 3-2-1.

What do I need for offsite backups?

Kopia, in a container. The Consultant tells you whether it is there and can install it and set up the repository — S3-compatible storage or a folder, new or existing — always with a preview first. Or a second Unraid server with the office as a partner office.

Where do I report a problem or a wish?

From inside the office, without any account: ⋯ → Report a problem or a wish… on any page. Before anything is sent you see every part — your words, the versions, the desk’s last error and log lines, already cleaned of names, paths and addresses — and untick what should stay. It goes to the makers’ private inbox; you get a number. Or open an issue on GitHub.

Which languages does it speak?

English, German, Italian, French and Spanish — your browser’s language, or another one picked under ⋯ → Language. Where it tells you what to click in Unraid, it names Unraid’s menus as Unraid shows them, in the language Unraid runs in.

Does it fit my Unraid theme?

Yes. The office takes Unraid’s theme — black, white, azure or gray. The switch Auto · Dark · Light at the reception can force a dark or light look on the office’s own area for your browser.

What happens if I remove it?

Under Plugins → Remove the code and the schedules go. Your data in appdata, the share UnraidSecretaryOffice, the setting on the flash and whatever the desks set up on the server — snapshots, Ms. Dustdevil’s storeroom — stay; delete them yourself if you no longer want them.