💣 BombVault Widget puts BombVault's activity log where you already look: a real, native tile on the Unraid 7 dashboard. Every backup, restore, verify, prune, off-site replication and drill scrolls by as it happens, plus the next scheduled run, in the same dark terminal-style log as BombVault's own widget.

Read-only: the tile is fed through a same-origin proxy; the widget token never reaches the browser.

A one-knight job: I build it, keep it running, work through the issues and add what people ask for, until nothing is missing. It is free, with no accounts, no telemetry, no ads and no paid tier. No asterisk anywhere. Nothing readable ever leaves your own walls. Forged on evenings and weekends, with heart and stubbornness.

If it has earned a place on your server or computer, toss a coin to your knight: it helps cover the costs and keeps the project alive. It also makes this knight's heart beat a little faster. Three ways below, whichever suits you.

Table of Contents

1. What is this?
2. Screenshots
3. Requirements
4. Install on Unraid
5. Setup
6. How it works
7. Security
8. License
9. How AI is used here
10. Support this project

1. What is this?

A small Unraid plugin (no daemon, no container) that registers a native dashboard tile named BombVault Activity. The tile shows up in the dashboard's tile-management list like the built-in ones: hide it, move it between columns, collapse it. Its body is a fixed-height, scrollable, always-dark log (newest at the bottom, auto-follow unless you scroll up) whose lines mirror BombVault's own embeddable widget one-to-one: green for success, red for failures, blue for off-site replication, yellow for the pulsing "next: …" line.

2. Screenshots

The BombVault Activity tile on the Unraid dashboard: every backup, restore and verify scrolls by in the dark terminal-style log, with the pulsing "next: …" line at the bottom.

Settings under Utilities: BombVault URL + widget token with a one-click connection test, and a short note on how the tile behaves.

3. Requirements

• Unraid 6.12.0 or newer (the tile uses the modern dashboard; built for Unraid 7).
• BombVault 6.9.0 or newer running on your network.
• A widget token, generated in BombVault → Settings → System → Dashboard widget.

4. Install on Unraid

Community Applications listing: TODO. Until the CA entry in unraid-apps is live, install via Plugins → Install Plugin with the raw .plg URL:

https://raw.githubusercontent.com/junkerderprovinz/bombvault-widget/main/plugin/bombvaultwidget.plg

5. Setup

1. In BombVault open Settings → System → Dashboard widget and generate a widget token (copy it right away, it is shown only once).
2. In Unraid open Settings → Utilities → BombVault Widget, enter the BombVault URL (e.g. https://192.168.20.51:3443) and the token, hit Apply. Pasting BombVault's full widget URL (…/widget?token=…) into the token field works too, the token part is extracted automatically.
3. Click Test connection. It answers with the BombVault version when everything is wired.
4. Open the Dashboard: the BombVault Activity tile is live in the middle column.

6. How it works

• bombvaultwidget.Dashboard.page registers the tile (Menu="Dashboard:0" + $mytiles), a static scaffold with the native Unraid 7 tile header (chevron, an open-BombVault link once a URL is configured, cog to the settings page).
• scripts/bombvaultwidget.js polls server/status.php every 10 seconds and renders the log rows via textContent (no HTML from feed data ever runs).
• server/status.php is a same-origin proxy: it reads the URL + token from /boot/config/plugins/bombvaultwidget/bombvaultwidget.cfg and calls exactly one endpoint, BombVault's GET /api/widget/data, with the X-Widget-Token header, 5 s timeout, self-signed LAN TLS accepted. Unreachable or misconfigured = a clean JSON 503, which the tile shows as a pulsing red status line while keeping the history on screen.

7. Security

The widget token stays server-side: the browser only ever talks to the Unraid webgui (session-protected), and the proxy only ever talks to the one hard-coded BombVault endpoint, so no request parameter can redirect it. On BombVault's side the token grants read-only access to the activity log and schedule preview, nothing else, and can be revoked/rotated any time in BombVault's settings. TLS peer verification is disabled for the LAN call because BombVault serves a self-signed certificate on a private address.

8. License

AGPL-3.0. See LICENSE.

9. How AI is used here

One knight builds this, and AI is one of the tools I work with, the same way I work with an editor or a compiler. It helps me write code and documentation and it checks my work, and that saves me a good many evenings. It does not make the decisions, though. I read and understand everything before it ships, and if something here breaks, that is on me and not on the tool.

You do not have to take my word for it. The code is open and every release note is written by hand. The issue tracker shows how problems actually get handled, including the ones I got wrong the first time. If you find something that is not right, open an issue and I will look at it.

10. Support this project

Questions, bugs, ideas or feature requests? Please open a GitHub issue.

A one-knight job: I build it, keep it running, work through the issues and add what people ask for, until nothing is missing. It is free, with no accounts, no telemetry, no ads and no paid tier. No asterisk anywhere. Nothing readable ever leaves your own walls. Forged on evenings and weekends, with heart and stubbornness.

If it has earned a place on your server or computer, toss a coin to your knight: it helps cover the costs and keeps the project alive. It also makes this knight's heart beat a little faster. Three ways below, whichever suits you.