Standard Notes WebUI for Unraid

A clean, opinionated Unraid Community Template for the official standardnotes/web browser client. Runs the static web app on Unraid in a single container, ready to be reverse-proxied to app.standardnotes.mydomain.tld and pointed at your self-hosted Standard Notes backend.

Unofficial community wrapper. Not affiliated with or supported by Standard Notes.

Table of Contents

1. What is this?
2. What it does NOT do
3. Quick Start on Unraid
4. Reverse Proxy
5. Configuring the Sync Server
6. Updating
7. Troubleshooting
8. Screenshots
9. Publishing to Community Applications
10. Contributing / License
11. Support this project

1. What is this?

This repository ships a single Unraid Community Application template for the official standardnotes/web Docker image — the browser client for Standard Notes.

It is the companion of the backend template repo junkerderprovinz/standardnotes-server (container name StandardNotes-Server). Together they let you run a fully self-hosted Standard Notes stack on Unraid:

Browser ──HTTPS──►  app.standardnotes.mydomain.tld  ──►  StandardNotes-WebUI  (this template, web client)
                                                              │
                                                              ▼  (Custom Sync Server set in the web UI)
            HTTPS──►  standardnotesserver.mydomain.tld     ──►  StandardNotes-Server  (companion repo, backend)

What you get:

• One container, one template. Container name StandardNotes-WebUI, image standardnotes/web:latest, host port 3001 → container port 80.
• Default port 3001 chosen so the WebUI does not collide with the backend's :3000 API gateway on the same Unraid host.
• Reverse-proxy ready. Pair with Nginx Proxy Manager / SWAG / Traefik to terminate TLS at e.g. app.standardnotes.mydomain.tld.
• Minimal env surface. The official upstream Docker docs only document docker run -d -p 3000:80 standardnotes/web — no sync-server env var is exposed, so this template intentionally does not invent one. Sync server is configured at runtime in the browser, see § 5.

2. What it does NOT do

• Does not host a sync server. This is only the browser UI. You still need a running Standard Notes backend — the companion repo standardnotes-server ships an Unraid template for standardnotes/server.
• Does not unlock paid / subscription Standard Notes features. Subscription-only client features (extended editors, advanced themes, Files quota, Listed, etc.) are gated by Standard Notes' own licensing / subscription checks, which live in the upstream client itself. This template deploys the upstream standardnotes/web image as-is and does not patch, bypass, or otherwise modify those checks. Self-hosting gives you data ownership and a free Sync server; it does not turn a free account into a paid one.
• Does not auto-configure the sync server. The upstream image does not document an env var for the default sync URL, so this template does not set one. Users enter their backend URL via the web app's Advanced options → Custom Sync Server on first launch — see § 5.

3. Quick Start on Unraid

Step 0 — Pre-flight

You will need:

• An Unraid server with Community Applications installed.
• A running Standard Notes backend reachable over HTTPS at e.g. https://standardnotesserver.mydomain.tld (use the standardnotes-server template).
• A reverse proxy (NPM, SWAG, Traefik, Caddy) for the web app's own hostname, e.g. app.standardnotes.mydomain.tld.

Step 1 — Install the template

Pull the template into Unraid's user-template folder:

mkdir -p /boot/config/plugins/dockerMan/templates-user

curl -fsSL -o /boot/config/plugins/dockerMan/templates-user/my-StandardNotes-WebUI.xml \
  https://raw.githubusercontent.com/junkerderprovinz/unraid-apps/main/standardnotes-webui/standardnotes-webui.xml

📌 Templates dropped into /boot/config/plugins/dockerMan/templates-user/ appear under Docker → Add Container → Template → User templates without restarting Docker.

Step 2 — Start the container

In the Unraid Web UI: Docker → Add Container → in the Template dropdown, pick StandardNotes-WebUI under User templates.

The only field is the WebUI Port (host port — default 3001). Hit Apply. The container starts in seconds; visit http://<unraid-ip>:3001/ to confirm the web app loads.

Step 3 — Reverse-proxy and connect to your backend

Set up a reverse-proxy host for the web app (see § 4), then open the web app at your public URL and configure the sync server (§ 5).

4. Reverse Proxy

Terminate TLS at your reverse proxy. The container itself serves plain HTTP on port 80 inside, exposed as host port 3001 by default.

⚠️ HTTPS is not optional for the web app. Standard Notes uses the browser's WebCrypto API (window.crypto.subtle) during sign-up and sign-in. Browsers only expose crypto.subtle on secure contexts (HTTPS, or the localhost exception). Opening the web app over http://<unraid-ip>:3001/ will fail at account creation with crypto.subtle is undefined. Always reach the web app through the HTTPS reverse-proxy hostname (e.g. https://app.standardnotes.mydomain.tld/).

Nginx Proxy Manager (recommended on Unraid)

In the NPM UI, Hosts → Proxy Hosts → Add Proxy Host:

Generic SWAG / nginx snippet

server {
    listen 443 ssl http2;
    server_name app.standardnotes.mydomain.tld;

    include /config/nginx/ssl.conf;

    location / {
        include /config/nginx/proxy.conf;
        resolver 127.0.0.11 valid=30s;
        set $upstream_app 192.168.x.x;
        set $upstream_port 3001;
        set $upstream_proto http;
        proxy_pass $upstream_proto://$upstream_app:$upstream_port;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

💡 The web app's hostname (app.standardnotes.mydomain.tld) and the backend's hostname (standardnotesserver.mydomain.tld) are different proxy hosts. Don't try to share one — the web app makes cross-origin API calls to the backend, so they need their own TLS certs and their own NPM / SWAG entries.

5. Configuring the Sync Server

The official standardnotes/web image does not expose an env var for the default sync server. The upstream Docker docs only show:

docker run -d -p 3000:80 standardnotes/web

Sync server is configured per-user, at runtime in the browser:

1. Open the web app at https://app.standardnotes.mydomain.tld/.
2. On the sign-in / sign-up screen, click Advanced options.
3. Set Sync Server to your backend's public URL, e.g. https://standardnotesserver.mydomain.tld.
4. Sign in or create an account against your self-hosted backend.

The browser remembers the custom sync URL per origin — every user of your web app instance enters it once.

⚠️ Do not invent env vars. If you find a third-party guide that mentions e.g. SYNC_SERVER_URL or DEFAULT_SYNC_SERVER for standardnotes/web, treat it skeptically — the official Docker docs do not list any such variable, and adding unsupported env vars to this template can silently produce a web client that points at the public Standard Notes sync server instead of your backend. Update this template only if https://hub.docker.com/r/standardnotes/web documents the variable.

6. Updating

docker pull standardnotes/web:latest
docker stop StandardNotes-WebUI && docker rm StandardNotes-WebUI
# re-create with the same template / docker run args

On Unraid: Docker tab → click the container → Force Update. The web app has no on-disk state, so updates are usually instant.

Pin a known-good tag in the template's Repository field if latest ever regresses, e.g. standardnotes/web:3.x.y.

7. Troubleshooting

8. Screenshots

Notes view served by the self-hosted web client (default light theme) — the Account menu shows the offline state with “Create free account” / “Sign in”.

Appearance menu with the bundled themes (Carbon dark selected) — Default, Autobiography, Dark, Carbon, Futura, Midnight, Solarized Dark, Titanium.

9. Publishing to Community Applications

This repo publishes one Unraid CA template:

The companion backend repo standardnotes-server publishes the two server-side templates (StandardNotes-Server plus the Standard-Notes-specific StandardNotes-LocalStack companion). One CA submission per repo — not per template.

Before submitting this repo at https://ca.unraid.net/submit:

• Repo is public and the Build / Lint workflows are green on main.
• LICENSE (MIT, OSI-approved) is at the repo root.
• ca_profile.xml is at the repo root with a non-empty <Profile>, and <Icon> / <WebPage> / <Repo> URLs that resolve.
• templates/standardnotes-webui.xml parses (xmllint --noout), pulls a real image, and every raw GitHub URL in it (<TemplateURL>, <Icon>) returns 200.
• A shared Unraid forum support thread for these templates is set in the template's <Support> tag: https://forums.unraid.net/topic/198811-support-junkerderprovinz-unraid-apps/.

xmllint --noout templates/standardnotes-webui.xml ca_profile.xml

for url in \
  https://raw.githubusercontent.com/junkerderprovinz/unraid-apps/main/standardnotes-webui/standardnotes-webui.xml \
  https://raw.githubusercontent.com/junkerderprovinz/unraid-apps/main/ca_profile.xml \
  assets/icon.png
do
  echo "$url"; curl -fsI "$url" | head -n 1
done

A 404 here is the most common reason a CA submission is rejected — fix before submitting.

10. Contributing / License

Pull requests welcome. Issues: https://github.com/junkerderprovinz/unraid-apps/issues.

License: MIT.

This wrapper repository (Unraid template, README, banner / icon artwork) is MIT-licensed. The upstream standardnotes/web image retains its own license (AGPL-3.0) — comply with it when running or redistributing the web client.

# Validate locally
python3 -c "import xml.etree.ElementTree as ET; \
  [ET.parse(f) for f in ['templates/standardnotes-webui.xml', \
                          'assets/banner.svg', \
                          'assets/icon.svg']]"

Credits

• Standard Notes — the actual project & upstream standardnotes/web Docker image
• standardnotes-server — companion Unraid template for the backend
• Unraid Community Applications — the distribution channel

11. Support this project

If this template saves you a setup hassle or a debug night, consider buying me a coffee: