OpenUEM Server
OpenUEM Server
Get Started with Apps!
Get Started with Apps!
App Version:
0.12.0
(Changelog)
Keywords: endpoint, management, monitoring
Train: Community
Home Page: https://openuem.eu/
Keywords: endpoint, management, monitoring
Train: Community
Home Page: https://openuem.eu/
OpenUEM Server Details
Added: 2026-03-16
Last Updated: 2026-03-19
Added: 2026-03-16
Last Updated: 2026-03-19
An Open-Source Unified Endpoint Manager that is self-hosted and lets you manage your IT assets thanks to its agents
Run as Context- Container [agents-worker] runs as root user and group.
Group: 0 / Host group is [root]
User: 0 / Host user is [root] - Container [cert-manager-worker] runs as root user and group.
Group: 0 / Host group is [root]
User: 0 / Host user is [root] - Container [console] runs as root user and group.
Group: 0 / Host group is [root]
User: 0 / Host user is [root] - Container [nats-server] runs as root user and group.
Group: 0 / Host group is [root]
User: 0 / Host user is [root] - Container [notification-worker] runs as root user and group.
Group: 0 / Host group is [root]
User: 0 / Host user is [root] - Container [ocsp-responder] runs as root user and group.
Group: 0 / Host group is [root]
User: 0 / Host user is [root] - Container [postgres] runs as non-root user and group.
Group: 999 / Host group is [docker]
User: 999 / Host user is [netdata]
Screenshots
×
![Full Screenshot]()
App Metadata (Raw File)
{
"1.0.2": {
"healthy": true,
"supported": true,
"healthy_error": null,
"location": "/__w/apps/apps/trains/community/openuem/1.0.2",
"last_update": "2026-03-19 19:36:15",
"required_features": [],
"human_version": "0.12.0_1.0.2",
"version": "1.0.2",
"app_metadata": {
"app_version": "0.12.0",
"capabilities": [],
"categories": [
"monitoring"
],
"changelog_url": "https://github.com/open-uem/openuem-console/releases",
"date_added": "2026-03-16",
"description": "An Open-Source Unified Endpoint Manager that is self-hosted and lets you manage your IT assets thanks to its agents",
"home": "https://openuem.eu/",
"host_mounts": [],
"icon": "https://media.sys.truenas.net/apps/openuem/icons/icon.svg",
"keywords": [
"endpoint",
"management",
"monitoring"
],
"lib_version": "2.2.8",
"lib_version_hash": "76b40b42163deb26edbad5f973f1bd69b68bd85625bcd8247545194d99b9f912",
"maintainers": [
{
"email": "dev@truenas.com",
"name": "truenas",
"url": "https://www.truenas.com/"
}
],
"name": "openuem",
"run_as_context": [
{
"description": "Container [agents-worker] runs as root user and group.",
"gid": 0,
"group_name": "Host group is [root]",
"uid": 0,
"user_name": "Host user is [root]"
},
{
"description": "Container [cert-manager-worker] runs as root user and group.",
"gid": 0,
"group_name": "Host group is [root]",
"uid": 0,
"user_name": "Host user is [root]"
},
{
"description": "Container [console] runs as root user and group.",
"gid": 0,
"group_name": "Host group is [root]",
"uid": 0,
"user_name": "Host user is [root]"
},
{
"description": "Container [nats-server] runs as root user and group.",
"gid": 0,
"group_name": "Host group is [root]",
"uid": 0,
"user_name": "Host user is [root]"
},
{
"description": "Container [notification-worker] runs as root user and group.",
"gid": 0,
"group_name": "Host group is [root]",
"uid": 0,
"user_name": "Host user is [root]"
},
{
"description": "Container [ocsp-responder] runs as root user and group.",
"gid": 0,
"group_name": "Host group is [root]",
"uid": 0,
"user_name": "Host user is [root]"
},
{
"description": "Container [postgres] runs as non-root user and group.",
"gid": 999,
"group_name": "Host group is [docker]",
"uid": 999,
"user_name": "Host user is [netdata]"
}
],
"screenshots": [
"https://media.sys.truenas.net/apps/openuem/screenshots/screenshot1.png",
"https://media.sys.truenas.net/apps/openuem/screenshots/screenshot2.png",
"https://media.sys.truenas.net/apps/openuem/screenshots/screenshot3.png",
"https://media.sys.truenas.net/apps/openuem/screenshots/screenshot4.png",
"https://media.sys.truenas.net/apps/openuem/screenshots/screenshot5.png",
"https://media.sys.truenas.net/apps/openuem/screenshots/screenshot6.png",
"https://media.sys.truenas.net/apps/openuem/screenshots/screenshot7.png"
],
"sources": [
"https://github.com/open-uem/openuem-console",
"https://hub.docker.com/r/openuem/openuem-console"
],
"title": "OpenUEM Server",
"train": "community",
"version": "1.0.2"
},
"schema": {
"groups": [
{
"name": "OpenUEM Configuration",
"description": "Configure OpenUEM"
},
{
"name": "Network Configuration",
"description": "Configure Network for OpenUEM"
},
{
"name": "Storage Configuration",
"description": "Configure Storage for OpenUEM"
},
{
"name": "Labels Configuration",
"description": "Configure Labels for OpenUEM"
},
{
"name": "Resources Configuration",
"description": "Configure Resources for OpenUEM"
}
],
"questions": [
{
"variable": "TZ",
"group": "OpenUEM Configuration",
"label": "Timezone",
"schema": {
"type": "string",
"default": "Etc/UTC",
"required": true,
"$ref": [
"definitions/timezone"
]
}
},
{
"variable": "openuem",
"label": "",
"group": "OpenUEM Configuration",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "postgres_image_selector",
"label": "Postgres Image (CAUTION)",
"description": "If you are changing this after the postgres directory has been initialized,</br>\nSTOP! and make sure you have a backup of your data.</br>\nChanging this will trigger an one way database upgrade.</br>\nYou can only select newer versions of postgres.</br>\nSelecting an older version will refuse to start.</br>\nIf something goes wrong, you will have to restore from backup.\n",
"schema": {
"type": "string",
"default": "postgres_18_image",
"required": true,
"enum": [
{
"value": "postgres_18_image",
"description": "Postgres 18"
}
]
}
},
{
"variable": "postgres_password",
"label": "Postgres Password",
"description": "The password for Postgres.",
"schema": {
"type": "string",
"default": "",
"required": true,
"private": true
}
},
{
"variable": "jwt_key",
"label": "JWT Key",
"description": "The JWT key to use for OpenUEM.",
"schema": {
"type": "string",
"default": "",
"min_length": 32,
"required": true,
"private": true
}
},
{
"variable": "domain",
"label": "Domain",
"description": "The domain to use for OpenUEM.</br>\nFor example: `example.com`\n",
"schema": {
"type": "string",
"default": "",
"required": true
}
},
{
"variable": "nats_subdomain",
"label": "NATS Subdomain",
"description": "The subdomain to use for the NATS server.</br>\nThis will be prepended to the domain.</br>\nFor example a subdomain of `nats` and a domain of `example.com`\nwill result in `nats.example.com`\n",
"schema": {
"type": "string",
"default": "nats",
"required": true
}
},
{
"variable": "ocsp_subdomain",
"label": "OCSP Subdomain",
"description": "The subdomain to use for the OCSP server.</br>\nThis will be prepended to the domain.</br>\nFor example a subdomain of `ocsp` and a domain of `example.com`\nwill result in `ocsp.example.com`\n",
"schema": {
"type": "string",
"default": "ocsp",
"required": true
}
},
{
"variable": "console_subdomain",
"label": "Console Subdomain",
"description": "The subdomain to use for the Console server.</br>\nThis will be prepended to the domain.</br>\nFor example a subdomain of `console` and a domain of `example.com`\nwill result in `console.example.com`\n",
"schema": {
"type": "string",
"default": "console",
"required": true
}
},
{
"variable": "org_name",
"label": "Organization Name",
"description": "The name of the organization.</br>\nThese are used for the certificate generation</br>\nFor example: `OpenUEM`\n",
"schema": {
"type": "string",
"default": "",
"required": true
}
},
{
"variable": "org_province",
"label": "Organization Province",
"description": "The province of the organization.</br>\nThese are used for the certificate generation</br>\nFor example: `State`\n",
"schema": {
"type": "string",
"default": "",
"required": true
}
},
{
"variable": "org_locality",
"label": "Organization Locality",
"description": "The locality of the organization.</br>\nThese are used for the certificate generation</br>\nFor example: `City`\n",
"schema": {
"type": "string",
"default": "",
"required": true
}
},
{
"variable": "org_address",
"label": "Organization Address",
"description": "The address of the organization.</br>\nThese are used for the certificate generation</br>\nFor example: `Address`\n",
"schema": {
"type": "string",
"default": "",
"required": true
}
},
{
"variable": "org_country",
"label": "Organization Country",
"description": "The country of the organization.</br>\nThese are used for the certificate generation</br>\nFor example: `Country`\n",
"schema": {
"type": "string",
"default": "",
"required": true
}
},
{
"variable": "reverse_proxy_host",
"label": "Reverse Proxy Host",
"description": "The host to use for the reverse proxy.</br>\nFor example: `example.com`\n",
"schema": {
"type": "string",
"default": ""
}
},
{
"variable": "reverse_proxy_auth_port",
"label": "Reverse Proxy Auth Port",
"description": "The port to use for the reverse proxy auth.</br>\nFor example: `4443`\n",
"schema": {
"type": "int",
"min": 1,
"max": 65535,
"null": true
}
},
{
"variable": "additional_envs",
"label": "Additional Environment Variables",
"schema": {
"type": "list",
"default": [],
"items": [
{
"variable": "env",
"label": "Environment Variable",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "container",
"label": "Container",
"schema": {
"type": "string",
"required": true,
"enum": [
{
"value": "console",
"description": "console"
},
{
"value": "ocsp-responder",
"description": "ocsp-responder"
},
{
"value": "notification-worker",
"description": "notification-worker"
},
{
"value": "cert-manager-worker",
"description": "cert-manager-worker"
},
{
"value": "agents-worker",
"description": "agents-worker"
},
{
"value": "nats-server",
"description": "nats-server"
}
]
}
},
{
"variable": "name",
"label": "Name",
"schema": {
"type": "string",
"required": true
}
},
{
"variable": "value",
"label": "Value",
"schema": {
"type": "string"
}
}
]
}
}
]
}
}
]
}
},
{
"variable": "network",
"label": "",
"group": "Network Configuration",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "web_port",
"label": "Console Port",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "bind_mode",
"label": "Port Bind Mode",
"description": "The port bind mode.</br>\n- Publish: The port will be published on the host for external access.</br>\n- Expose: The port will be exposed for inter-container communication.</br>\n- None: The port will not be exposed or published.</br>\nNote: If the Dockerfile defines an EXPOSE directive,\nthe port will still be exposed for inter-container communication regardless of this setting.\n",
"schema": {
"type": "string",
"default": "published",
"enum": [
{
"value": "published",
"description": "Publish port on the host for external access"
},
{
"value": "exposed",
"description": "Expose port for inter-container communication"
},
{
"value": "",
"description": "None"
}
]
}
},
{
"variable": "port_number",
"label": "Port Number",
"schema": {
"type": "int",
"default": 30400,
"min": 1,
"max": 65535,
"required": true
}
},
{
"variable": "host_ips",
"label": "Host IPs",
"description": "IPs on the host to bind this port",
"schema": {
"type": "list",
"show_if": [
[
"bind_mode",
"=",
"published"
]
],
"default": [],
"items": [
{
"variable": "host_ip",
"label": "Host IP",
"schema": {
"type": "string",
"required": true,
"$ref": [
"definitions/node_bind_ip"
]
}
}
]
}
}
]
}
},
{
"variable": "auth_port",
"label": "Auth Port",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "bind_mode",
"label": "Port Bind Mode",
"description": "The port bind mode.</br>\n- Publish: The port will be published on the host for external access.</br>\n- Expose: The port will be exposed for inter-container communication.</br>\n- None: The port will not be exposed or published.</br>\nNote: If the Dockerfile defines an EXPOSE directive,\nthe port will still be exposed for inter-container communication regardless of this setting.\n",
"schema": {
"type": "string",
"default": "published",
"enum": [
{
"value": "published",
"description": "Publish port on the host for external access"
},
{
"value": "exposed",
"description": "Expose port for inter-container communication"
},
{
"value": "",
"description": "None"
}
]
}
},
{
"variable": "port_number",
"label": "Port Number",
"schema": {
"type": "int",
"default": 30401,
"min": 1,
"max": 65535,
"required": true
}
},
{
"variable": "host_ips",
"label": "Host IPs",
"description": "IPs on the host to bind this port",
"schema": {
"type": "list",
"show_if": [
[
"bind_mode",
"=",
"published"
]
],
"default": [],
"items": [
{
"variable": "host_ip",
"label": "Host IP",
"schema": {
"type": "string",
"required": true,
"$ref": [
"definitions/node_bind_ip"
]
}
}
]
}
}
]
}
},
{
"variable": "ocsp_port",
"label": "OCSP Port",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "bind_mode",
"label": "Port Bind Mode",
"description": "The port bind mode.</br>\n- Publish: The port will be published on the host for external access.</br>\n- Expose: The port will be exposed for inter-container communication.</br>\n- None: The port will not be exposed or published.</br>\nNote: If the Dockerfile defines an EXPOSE directive,\nthe port will still be exposed for inter-container communication regardless of this setting.\n",
"schema": {
"type": "string",
"default": "published",
"enum": [
{
"value": "published",
"description": "Publish port on the host for external access"
},
{
"value": "exposed",
"description": "Expose port for inter-container communication"
},
{
"value": "",
"description": "None"
}
]
}
},
{
"variable": "port_number",
"label": "Port Number",
"schema": {
"type": "int",
"default": 30402,
"min": 1,
"max": 65535,
"required": true
}
},
{
"variable": "host_ips",
"label": "Host IPs",
"description": "IPs on the host to bind this port",
"schema": {
"type": "list",
"show_if": [
[
"bind_mode",
"=",
"published"
]
],
"default": [],
"items": [
{
"variable": "host_ip",
"label": "Host IP",
"schema": {
"type": "string",
"required": true,
"$ref": [
"definitions/node_bind_ip"
]
}
}
]
}
}
]
}
},
{
"variable": "nats_port",
"label": "NATS Port",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "bind_mode",
"label": "Port Bind Mode",
"description": "The port bind mode.</br>\n- Publish: The port will be published on the host for external access.</br>\n- Expose: The port will be exposed for inter-container communication.</br>\n- None: The port will not be exposed or published.</br>\nNote: If the Dockerfile defines an EXPOSE directive,\nthe port will still be exposed for inter-container communication regardless of this setting.\n",
"schema": {
"type": "string",
"default": "published",
"enum": [
{
"value": "published",
"description": "Publish port on the host for external access"
},
{
"value": "exposed",
"description": "Expose port for inter-container communication"
},
{
"value": "",
"description": "None"
}
]
}
},
{
"variable": "port_number",
"label": "Port Number",
"schema": {
"type": "int",
"default": 30403,
"min": 1,
"max": 65535,
"required": true
}
},
{
"variable": "host_ips",
"label": "Host IPs",
"description": "IPs on the host to bind this port",
"schema": {
"type": "list",
"show_if": [
[
"bind_mode",
"=",
"published"
]
],
"default": [],
"items": [
{
"variable": "host_ip",
"label": "Host IP",
"schema": {
"type": "string",
"required": true,
"$ref": [
"definitions/node_bind_ip"
]
}
}
]
}
}
]
}
},
{
"variable": "networks",
"label": "Networks",
"description": "The docker networks to join",
"schema": {
"type": "list",
"default": [],
"items": [
{
"variable": "network",
"label": "Network",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "name",
"label": "Name",
"description": "The name of the network to join.</br>\nThe network must already exist.\n",
"schema": {
"type": "string",
"default": "",
"required": true
}
},
{
"variable": "containers",
"label": "Containers",
"description": "The containers to add to this network.",
"schema": {
"type": "list",
"items": [
{
"variable": "container",
"label": "Container",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "name",
"label": "Container Name",
"schema": {
"type": "string",
"required": true,
"enum": [
{
"value": "console",
"description": "console"
},
{
"value": "ocsp-responder",
"description": "ocsp-responder"
},
{
"value": "notification-worker",
"description": "notification-worker"
},
{
"value": "cert-manager-worker",
"description": "cert-manager-worker"
},
{
"value": "agents-worker",
"description": "agents-worker"
},
{
"value": "nats-server",
"description": "nats-server"
},
{
"value": "postgres",
"description": "postgres"
}
]
}
},
{
"variable": "config",
"label": "Container Network Configuration",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "aliases",
"label": "Aliases (Optional)",
"description": "The network aliases to use for this container on this network.",
"schema": {
"type": "list",
"default": [],
"items": [
{
"variable": "alias",
"label": "Alias",
"schema": {
"type": "string"
}
}
]
}
},
{
"variable": "interface_name",
"label": "Interface Name (Optional)",
"description": "The network interface name to use for this network",
"schema": {
"type": "string"
}
},
{
"variable": "mac_address",
"label": "MAC Address (Optional)",
"description": "The MAC address to use for this network interface.",
"schema": {
"type": "string"
}
},
{
"variable": "ipv4_address",
"label": "IPv4 Address (Optional)",
"description": "The IPv4 address to use for this network interface.",
"schema": {
"type": "string"
}
},
{
"variable": "ipv6_address",
"label": "IPv6 Address (Optional)",
"description": "The IPv6 address to use for this network interface.",
"schema": {
"type": "string"
}
},
{
"variable": "gw_priority",
"label": "Gateway Priority (Optional)",
"description": "Indicates the priority of the gateway for this network interface.",
"schema": {
"type": "int",
"null": true
}
},
{
"variable": "priority",
"label": "Priority (Optional)",
"description": "Indicates in which order Compose connects the service's containers to its networks.",
"schema": {
"type": "int",
"null": true
}
}
]
}
}
]
}
}
]
}
}
]
}
}
]
}
}
]
}
},
{
"variable": "storage",
"label": "",
"group": "Storage Configuration",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "nats_data",
"label": "NATS Data Storage",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "type",
"label": "Type",
"description": "ixVolume: Is dataset created automatically by the system.</br>\nHost Path: Is a path that already exists on the system.\n",
"schema": {
"type": "string",
"required": true,
"default": "ix_volume",
"enum": [
{
"value": "host_path",
"description": "Host Path (Path that already exists on the system)"
},
{
"value": "ix_volume",
"description": "ixVolume (Dataset created automatically by the system)"
}
]
}
},
{
"variable": "ix_volume_config",
"label": "ixVolume Configuration",
"description": "The configuration for the ixVolume dataset.",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"ix_volume"
]
],
"$ref": [
"normalize/ix_volume"
],
"attrs": [
{
"variable": "acl_enable",
"label": "Enable ACL",
"description": "Enable ACL for the storage.",
"schema": {
"type": "boolean",
"default": false
}
},
{
"variable": "dataset_name",
"label": "Dataset Name",
"description": "The name of the dataset to use for storage.",
"schema": {
"type": "string",
"required": true,
"hidden": true,
"default": "nats_data"
}
},
{
"variable": "acl_entries",
"label": "ACL Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"acl_enable",
"=",
true
]
],
"attrs": []
}
}
]
}
},
{
"variable": "host_path_config",
"label": "Host Path Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"host_path"
]
],
"attrs": [
{
"variable": "acl_enable",
"label": "Enable ACL",
"description": "Enable ACL for the storage.",
"schema": {
"type": "boolean",
"default": false
}
},
{
"variable": "acl",
"label": "ACL Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"acl_enable",
"=",
true
]
],
"attrs": [],
"$ref": [
"normalize/acl"
]
}
},
{
"variable": "path",
"label": "Host Path",
"description": "The host path to use for storage.",
"schema": {
"type": "hostpath",
"show_if": [
[
"acl_enable",
"=",
false
]
],
"required": true
}
}
]
}
}
]
}
},
{
"variable": "certificates",
"label": "Certificates Storage",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "type",
"label": "Type",
"description": "ixVolume: Is dataset created automatically by the system.</br>\nHost Path: Is a path that already exists on the system.\n",
"schema": {
"type": "string",
"required": true,
"default": "ix_volume",
"enum": [
{
"value": "host_path",
"description": "Host Path (Path that already exists on the system)"
},
{
"value": "ix_volume",
"description": "ixVolume (Dataset created automatically by the system)"
}
]
}
},
{
"variable": "ix_volume_config",
"label": "ixVolume Configuration",
"description": "The configuration for the ixVolume dataset.",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"ix_volume"
]
],
"$ref": [
"normalize/ix_volume"
],
"attrs": [
{
"variable": "acl_enable",
"label": "Enable ACL",
"description": "Enable ACL for the storage.",
"schema": {
"type": "boolean",
"default": false
}
},
{
"variable": "dataset_name",
"label": "Dataset Name",
"description": "The name of the dataset to use for storage.",
"schema": {
"type": "string",
"required": true,
"hidden": true,
"default": "certificates"
}
},
{
"variable": "acl_entries",
"label": "ACL Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"acl_enable",
"=",
true
]
],
"attrs": []
}
}
]
}
},
{
"variable": "host_path_config",
"label": "Host Path Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"host_path"
]
],
"attrs": [
{
"variable": "acl_enable",
"label": "Enable ACL",
"description": "Enable ACL for the storage.",
"schema": {
"type": "boolean",
"default": false
}
},
{
"variable": "acl",
"label": "ACL Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"acl_enable",
"=",
true
]
],
"attrs": [],
"$ref": [
"normalize/acl"
]
}
},
{
"variable": "path",
"label": "Host Path",
"description": "The host path to use for storage.",
"schema": {
"type": "hostpath",
"show_if": [
[
"acl_enable",
"=",
false
]
],
"required": true
}
}
]
}
}
]
}
},
{
"variable": "postgres_data",
"label": "Postgres Data Storage",
"description": "The path to store Postgres Data.",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "type",
"label": "Type",
"description": "ixVolume: Is dataset created automatically by the system.</br>\nHost Path: Is a path that already exists on the system.\n",
"schema": {
"type": "string",
"required": true,
"default": "ix_volume",
"enum": [
{
"value": "host_path",
"description": "Host Path (Path that already exists on the system)"
},
{
"value": "ix_volume",
"description": "ixVolume (Dataset created automatically by the system)"
}
]
}
},
{
"variable": "ix_volume_config",
"label": "ixVolume Configuration",
"description": "The configuration for the ixVolume dataset.",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"ix_volume"
]
],
"$ref": [
"normalize/ix_volume"
],
"attrs": [
{
"variable": "acl_enable",
"label": "Enable ACL",
"description": "Enable ACL for the storage.",
"schema": {
"type": "boolean",
"default": false
}
},
{
"variable": "dataset_name",
"label": "Dataset Name",
"description": "The name of the dataset to use for storage.",
"schema": {
"type": "string",
"required": true,
"hidden": true,
"default": "pg_data"
}
},
{
"variable": "acl_entries",
"label": "ACL Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"acl_enable",
"=",
true
]
],
"attrs": []
}
}
]
}
},
{
"variable": "host_path_config",
"label": "Host Path Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"host_path"
]
],
"attrs": [
{
"variable": "acl_enable",
"label": "Enable ACL",
"description": "Enable ACL for the storage.",
"schema": {
"type": "boolean",
"default": false
}
},
{
"variable": "acl",
"label": "ACL Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"acl_enable",
"=",
true
]
],
"attrs": [],
"$ref": [
"normalize/acl"
]
}
},
{
"variable": "path",
"label": "Host Path",
"description": "The host path to use for storage.",
"schema": {
"type": "hostpath",
"show_if": [
[
"acl_enable",
"=",
false
]
],
"required": true
}
},
{
"variable": "auto_permissions",
"label": "Automatic Permissions",
"description": "Automatically set permissions for the host path.\nEnabling this, will check the top level directory,</br>\nIf it finds incorrect permissions, it will `chown` the\nhost path to the user and group required for the\npostgres container.\n",
"schema": {
"type": "boolean",
"default": false,
"show_if": [
[
"acl_enable",
"=",
false
]
]
}
}
]
}
}
]
}
},
{
"variable": "additional_storage",
"label": "Additional Storage",
"schema": {
"type": "list",
"default": [],
"items": [
{
"variable": "storage_entry",
"label": "Storage Entry",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "container",
"label": "Container",
"schema": {
"type": "string",
"required": true,
"enum": [
{
"value": "console",
"description": "console"
},
{
"value": "ocsp-responder",
"description": "ocsp-responder"
},
{
"value": "notification-worker",
"description": "notification-worker"
},
{
"value": "cert-manager-worker",
"description": "cert-manager-worker"
},
{
"value": "agents-worker",
"description": "agents-worker"
},
{
"value": "nats-server",
"description": "nats-server"
}
]
}
},
{
"variable": "type",
"label": "Type",
"description": "ixVolume: Is dataset created automatically by the system.</br>\nHost Path: Is a path that already exists on the system.</br>\nSMB Share: Is a SMB share that is mounted to as a volume.</br>\nNFS Share: Is a NFS share that is mounted to as a volume.\n",
"schema": {
"type": "string",
"required": true,
"default": "ix_volume",
"enum": [
{
"value": "host_path",
"description": "Host Path (Path that already exists on the system)"
},
{
"value": "ix_volume",
"description": "ixVolume (Dataset created automatically by the system)"
},
{
"value": "cifs",
"description": "SMB/CIFS Share (Mounts a volume to a SMB share)"
},
{
"value": "nfs",
"description": "NFS Share (Mounts a volume to a NFS share)"
}
]
}
},
{
"variable": "read_only",
"label": "Read Only",
"description": "Mount the volume as read only.",
"schema": {
"type": "boolean",
"default": false
}
},
{
"variable": "mount_path",
"label": "Mount Path",
"description": "The path inside the container to mount the storage.",
"schema": {
"type": "path",
"required": true
}
},
{
"variable": "host_path_config",
"label": "Host Path Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"host_path"
]
],
"attrs": [
{
"variable": "acl_enable",
"label": "Enable ACL",
"description": "Enable ACL for the storage.",
"schema": {
"type": "boolean",
"default": false
}
},
{
"variable": "acl",
"label": "ACL Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"acl_enable",
"=",
true
]
],
"attrs": [],
"$ref": [
"normalize/acl"
]
}
},
{
"variable": "path",
"label": "Host Path",
"description": "The host path to use for storage.",
"schema": {
"type": "hostpath",
"show_if": [
[
"acl_enable",
"=",
false
]
],
"required": true
}
}
]
}
},
{
"variable": "ix_volume_config",
"label": "ixVolume Configuration",
"description": "The configuration for the ixVolume dataset.",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"ix_volume"
]
],
"$ref": [
"normalize/ix_volume"
],
"attrs": [
{
"variable": "acl_enable",
"label": "Enable ACL",
"description": "Enable ACL for the storage.",
"schema": {
"type": "boolean",
"default": false
}
},
{
"variable": "dataset_name",
"label": "Dataset Name",
"description": "The name of the dataset to use for storage.",
"schema": {
"type": "string",
"required": true,
"default": "storage_entry"
}
},
{
"variable": "acl_entries",
"label": "ACL Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"acl_enable",
"=",
true
]
],
"attrs": [],
"$ref": [
"normalize/acl"
]
}
}
]
}
},
{
"variable": "cifs_config",
"label": "SMB Configuration",
"description": "The configuration for the SMB dataset.",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"cifs"
]
],
"attrs": [
{
"variable": "server",
"label": "Server",
"description": "The server to mount the SMB share.",
"schema": {
"type": "string",
"required": true
}
},
{
"variable": "path",
"label": "Path",
"description": "The path to mount the SMB share.",
"schema": {
"type": "string",
"required": true
}
},
{
"variable": "username",
"label": "Username",
"description": "The username to use for the SMB share.",
"schema": {
"type": "string",
"required": true
}
},
{
"variable": "password",
"label": "Password",
"description": "The password to use for the SMB share.",
"schema": {
"type": "string",
"required": true,
"private": true
}
},
{
"variable": "domain",
"label": "Domain",
"description": "The domain to use for the SMB share.",
"schema": {
"type": "string"
}
}
]
}
},
{
"variable": "nfs_config",
"label": "NFS Configuration",
"description": "The configuration for the NFS dataset.",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"nfs"
]
],
"attrs": [
{
"variable": "server",
"label": "Server",
"description": "The server to mount the NFS share.",
"schema": {
"type": "string",
"required": true
}
},
{
"variable": "path",
"label": "Path",
"description": "The path to mount the NFS share.",
"schema": {
"type": "string",
"required": true
}
}
]
}
}
]
}
}
]
}
}
]
}
},
{
"variable": "labels",
"label": "",
"group": "Labels Configuration",
"schema": {
"type": "list",
"default": [],
"items": [
{
"variable": "label",
"label": "Label",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "key",
"label": "Key",
"schema": {
"type": "string",
"required": true
}
},
{
"variable": "value",
"label": "Value",
"schema": {
"type": "string",
"required": true
}
},
{
"variable": "containers",
"label": "Containers",
"description": "Containers where the label should be applied",
"schema": {
"type": "list",
"items": [
{
"variable": "container",
"label": "Container",
"schema": {
"type": "string",
"required": true,
"enum": [
{
"value": "console",
"description": "console"
},
{
"value": "ocsp-responder",
"description": "ocsp-responder"
},
{
"value": "notification-worker",
"description": "notification-worker"
},
{
"value": "cert-manager-worker",
"description": "cert-manager-worker"
},
{
"value": "agents-worker",
"description": "agents-worker"
},
{
"value": "nats-server",
"description": "nats-server"
},
{
"value": "postgres",
"description": "postgres"
}
]
}
}
]
}
}
]
}
}
]
}
},
{
"variable": "resources",
"label": "",
"group": "Resources Configuration",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "limits",
"label": "Limits",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "cpus",
"label": "CPUs",
"description": "CPUs limit for OpenUEM.",
"schema": {
"type": "int",
"default": 2,
"required": true
}
},
{
"variable": "memory",
"label": "Memory (in MB)",
"description": "Memory limit for OpenUEM.",
"schema": {
"type": "int",
"default": 4096,
"required": true
}
}
]
}
}
]
}
}
]
},
"readme": "<h1>OpenUEM</h1> <p><a href=\"https://openuem.eu/\">OpenUEM</a> - An Open-Source Unified Endpoint Manager that is self-hosted and lets you manage your IT assets thanks to its agents</p>",
"changelog": null,
"chart_metadata": {
"app_version": "0.12.0",
"capabilities": [],
"categories": [
"monitoring"
],
"changelog_url": "https://github.com/open-uem/openuem-console/releases",
"date_added": "2026-03-16",
"description": "An Open-Source Unified Endpoint Manager that is self-hosted and lets you manage your IT assets thanks to its agents",
"home": "https://openuem.eu/",
"host_mounts": [],
"icon": "https://media.sys.truenas.net/apps/openuem/icons/icon.svg",
"keywords": [
"endpoint",
"management",
"monitoring"
],
"lib_version": "2.2.8",
"lib_version_hash": "76b40b42163deb26edbad5f973f1bd69b68bd85625bcd8247545194d99b9f912",
"maintainers": [
{
"email": "dev@truenas.com",
"name": "truenas",
"url": "https://www.truenas.com/"
}
],
"name": "openuem",
"run_as_context": [
{
"description": "Container [agents-worker] runs as root user and group.",
"gid": 0,
"group_name": "Host group is [root]",
"uid": 0,
"user_name": "Host user is [root]"
},
{
"description": "Container [cert-manager-worker] runs as root user and group.",
"gid": 0,
"group_name": "Host group is [root]",
"uid": 0,
"user_name": "Host user is [root]"
},
{
"description": "Container [console] runs as root user and group.",
"gid": 0,
"group_name": "Host group is [root]",
"uid": 0,
"user_name": "Host user is [root]"
},
{
"description": "Container [nats-server] runs as root user and group.",
"gid": 0,
"group_name": "Host group is [root]",
"uid": 0,
"user_name": "Host user is [root]"
},
{
"description": "Container [notification-worker] runs as root user and group.",
"gid": 0,
"group_name": "Host group is [root]",
"uid": 0,
"user_name": "Host user is [root]"
},
{
"description": "Container [ocsp-responder] runs as root user and group.",
"gid": 0,
"group_name": "Host group is [root]",
"uid": 0,
"user_name": "Host user is [root]"
},
{
"description": "Container [postgres] runs as non-root user and group.",
"gid": 999,
"group_name": "Host group is [docker]",
"uid": 999,
"user_name": "Host user is [netdata]"
}
],
"screenshots": [
"https://media.sys.truenas.net/apps/openuem/screenshots/screenshot1.png",
"https://media.sys.truenas.net/apps/openuem/screenshots/screenshot2.png",
"https://media.sys.truenas.net/apps/openuem/screenshots/screenshot3.png",
"https://media.sys.truenas.net/apps/openuem/screenshots/screenshot4.png",
"https://media.sys.truenas.net/apps/openuem/screenshots/screenshot5.png",
"https://media.sys.truenas.net/apps/openuem/screenshots/screenshot6.png",
"https://media.sys.truenas.net/apps/openuem/screenshots/screenshot7.png"
],
"sources": [
"https://github.com/open-uem/openuem-console",
"https://hub.docker.com/r/openuem/openuem-console"
],
"title": "OpenUEM Server",
"train": "community",
"version": "1.0.2"
}
}
}Support, maintenance, and documentation for applications within the Community catalog is handled by the TrueNAS community. The TrueNAS Applications Market hosts but does not validate or maintain any linked resources associated with this app.
There currently aren’t any resources available for this application!
Please help the TrueNAS community add resources here or discuss this application in the TrueNAS Community forum.