ci(sync): sync CA template metadata

dify-aio.xml

@@ -41,6 +41,9 @@
   <Icon>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/icons/dify.png</Icon>
   <ExtraSearchTerms>ai agent workflow llm rag chatbot mcp openai anthropic ollama app builder knowledge base</ExtraSearchTerms>
   <Requires>Dify is a heavier multi-service application. Plan for at least 2 CPU cores and 4 GiB RAM, with more memory for real workloads. Public exposure should be placed behind a trusted reverse proxy with TLS. Model-provider API keys, SMTP, object storage, and external vector stores are optional but may be required for production use.</Requires>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/dify-aio/01-login.png</Screenshot>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/dify-aio/02-workspace.png</Screenshot>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/dify-aio/03-studio.png</Screenshot>
   <ExtraParams/>
   <PostArgs/>
   <CPUset/>

infisical-aio.xml

@@ -35,12 +35,16 @@
   <Changes>### 2026-05-21&#xD;
 - Generated from CHANGELOG.md during release preparation. Do not edit manually.&#xD;
 - Bump infisical to v0.160.4</Changes>
-  <Category>Network:Security Security Tools:Utilities</Category>
+  <Category>Security Tools:Utilities</Category>
   <WebUI>http://[IP]:[PORT:8080]</WebUI>
   <TemplateURL>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/infisical-aio.xml</TemplateURL>
+  <ReadMe>https://github.com/JSONbored/infisical-aio#readme</ReadMe>
   <Icon>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/icons/infisical.png</Icon>
   <ExtraSearchTerms>secrets manager vault devops credentials certificates pki pam secret scanning self-hosted</ExtraSearchTerms>
   <Requires>Use a correct public or LAN [code]SITE_URL[/code] and back up both your PostgreSQL data and the persisted [code]ENCRYPTION_KEY[/code]. For larger or higher-availability deployments, move PostgreSQL and Redis out of the bundled container and use the advanced external override fields.</Requires>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/infisical-aio/01-login.png</Screenshot>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/infisical-aio/02-dashboard.png</Screenshot>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/infisical-aio/03-project.png</Screenshot>
   <ExtraParams/>
   <PostArgs/>
   <CPUset/>

khoj-aio.xml

@@ -33,12 +33,16 @@
   <Changes>### 2026-05-21&#xD;
 - Generated from CHANGELOG.md during release preparation. Do not edit manually.&#xD;
 - Keep PG14 runtime for existing internal volumes</Changes>
-  <Category>AI: Productivity: Tools:Utilities</Category>
+  <Category>AI Productivity Tools:Utilities</Category>
   <WebUI>http://[IP]:[PORT:42110]</WebUI>
   <TemplateURL>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/khoj-aio.xml</TemplateURL>
+  <ReadMe>https://github.com/JSONbored/khoj-aio#readme</ReadMe>
   <Icon>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/icons/khoj.png</Icon>
   <ExtraSearchTerms>ai second-brain notes documents rag knowledge-base search ollama anthropic gemini openai</ExtraSearchTerms>
   <Requires>For public internet exposure, do not leave anonymous mode enabled unless you intentionally accept that risk. Set strong admin credentials and configure [code]KHOJ_DOMAIN[/code] / [code]KHOJ_ALLOWED_DOMAIN[/code] before remote access.</Requires>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/khoj-aio/01-home.png</Screenshot>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/khoj-aio/02-chat.png</Screenshot>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/khoj-aio/03-settings.png</Screenshot>
   <ExtraParams/>
   <PostArgs/>
   <CPUset/>

mem0-aio.xml

@@ -35,12 +35,16 @@
 - Generated from CHANGELOG.md during release preparation. Do not edit manually.
 - Harden mem0 apt and upstream provenance
 - Remove repo-local test deps</Changes>
-  <Category>AI: Productivity: Tools:Utilities</Category>
+  <Category>AI Productivity Tools:Utilities</Category>
   <WebUI>http://[IP]:[PORT:3000]</WebUI>
   <TemplateURL>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/mem0-aio.xml</TemplateURL>
+  <ReadMe>https://github.com/JSONbored/mem0-aio#readme</ReadMe>
   <Icon>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/icons/mem0.jpeg</Icon>
   <ExtraSearchTerms>ai memory mcp llm openmemory qdrant ollama anthropic groq deepseek embeddings vector database</ExtraSearchTerms>
   <Requires>OpenMemory still needs a valid LLM/embedder setup for actual memory generation. For the easiest first boot, keep bundled storage defaults and either set OPENAI_API_KEY or point the app at a reachable native Ollama endpoint with chat and embedding models you already have pulled. External vector storage is advanced: configure exactly one backend.</Requires>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/mem0-aio/01-home.png</Screenshot>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/mem0-aio/02-memories.png</Screenshot>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/mem0-aio/03-settings.png</Screenshot>
   <ExtraParams/>
   <PostArgs/>
   <CPUset/>

nanoclaw-aio.xml

@@ -47,7 +47,7 @@
   <DonateText>Support JSONbored on GitHub Sponsors.</DonateText>
   <DonateLink>https://github.com/sponsors/JSONbored</DonateLink>
   <Description/>
-  <ReadMe>Configure [code]TELEGRAM_BOT_TOKEN[/code] and at least one Claude credential, then start the container and watch the logs for [code]PAIR_TELEGRAM_CODE[/code]. Send that code to your Telegram bot to pair the main chat. NanoClaw stores runtime state under [code]/appdata[/code] and uses the Docker socket to launch paired [code]jsonbored/nanoclaw-agent[/code] helper containers.</ReadMe>
+  <ReadMe>https://github.com/JSONbored/nanoclaw-aio#readme</ReadMe>
 
   <Config Name="Appdata Directory" Target="/appdata" Default="/mnt/user/appdata/nanoclaw-aio" Mode="rw" Description="Persistent NanoClaw data: databases, logs, groups, channel state, env files, and host-visible runtime files for nested agent containers." Type="Path" Display="always" Required="true" Mask="false"/>
   <Config Name="Docker Socket" Target="/var/run/docker.sock" Default="" Mode="rw" Description="Advanced opt-in security-sensitive mount. NanoClaw v2 needs the Docker socket to spawn nested jsonbored/nanoclaw-agent helper containers, which grants host-level Docker control access." Type="Path" Display="advanced" Required="false" Mask="false"></Config>

penpot-aio.xml

@@ -30,17 +30,20 @@
 - Penpot is a real multi-service stack. Plan for at least 2 CPU cores and 4 GiB RAM, with more for active teams or large files.
 - Public exposure should sit behind a trusted HTTPS reverse proxy. Remove [code]disable-secure-session-cookies[/code] and [code]disable-email-verification[/code] for production.
 - The bundled Mailpit inbox is for local/lab capture, not real mail deliverability.</Overview>
-  <Changes>### 2026-05-21&#xD;
+  <Changes>### 2026-05-23&#xD;
 - Generated from CHANGELOG.md during release preparation. Do not edit manually.&#xD;
-- Align Penpot AIO documentation&#xD;
-- Mask credential-bearing upstream URIs</Changes>
+- Separate Penpot exporter port&#xD;
+- Keep Mailpit UI auth readable when extra.env pre-creates the config directory</Changes>
   <Category>Productivity Tools:Utilities</Category>
   <WebUI>http://[IP]:[PORT:8080]</WebUI>
   <TemplateURL>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/penpot-aio.xml</TemplateURL>
   <ReadMe>https://github.com/JSONbored/penpot-aio#readme</ReadMe>
   <Icon>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/icons/penpot.png</Icon>
   <ExtraSearchTerms>design prototype figma alternative whiteboard mcp ux ui product design self-hosted</ExtraSearchTerms>
   <Requires>Penpot is a heavier multi-service application. Plan for at least 2 CPU cores and 4 GiB RAM. Use HTTPS and production-safe flags before exposing it publicly.</Requires>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/penpot-aio/01-login.png</Screenshot>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/penpot-aio/02-projects.png</Screenshot>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/penpot-aio/03-editor.png</Screenshot>
   <ExtraParams/>
   <PostArgs/>
   <CPUset/>

signoz-agent.xml

@@ -34,6 +34,7 @@ Use signoz-agent on remote Unraid servers, separate Docker hosts, or any machine
   <Category>Network:Management Tools:Utilities</Category>
   <WebUI/>
   <TemplateURL>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/signoz-agent.xml</TemplateURL>
+  <ReadMe>https://github.com/JSONbored/signoz-aio#signoz-agent</ReadMe>
   <Icon>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/icons/signoz.png</Icon>
   <ExtraSearchTerms>observability monitoring telemetry opentelemetry otel collector agent traces metrics logs prometheus docker hostmetrics signoz</ExtraSearchTerms>
   <Requires>Requires a reachable SigNoz OTLP endpoint, usually your main signoz-aio instance or a remote SigNoz deployment. If signoz-agent is installed on the same Unraid host as signoz-aio, the default 4317 and 4318 host ports will conflict unless one template is adjusted. Host root, Docker socket, and Docker log mounts are blank by default; explicitly configure only the host access you need. Mounting /var/run/docker.sock can expose Docker control access to the collector container.</Requires>

signoz-aio.xml

@@ -35,9 +35,13 @@ Install it, keep the defaults, and point your OpenTelemetry senders at the publi
   <Category>Network:Management Tools:Utilities</Category>
   <WebUI>http://[IP]:[PORT:8080]</WebUI>
   <TemplateURL>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/signoz-aio.xml</TemplateURL>
+  <ReadMe>https://github.com/JSONbored/signoz-aio#readme</ReadMe>
   <Icon>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/icons/signoz.png</Icon>
   <ExtraSearchTerms>observability monitoring telemetry opentelemetry otel traces metrics logs apm clickhouse dashboards alerts collector</ExtraSearchTerms>
   <Requires>SigNoz is a heavier ClickHouse-backed observability stack; allocate at least 4GB Docker memory and expect a slower first boot than small single-service apps. Back up /appdata before upgrades. The optional local host agent requires explicitly enabling only the host and Docker mounts you need; mounting /var/run/docker.sock grants Docker control access to the container.</Requires>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/signoz-aio/01-login.png</Screenshot>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/signoz-aio/02-services.png</Screenshot>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/signoz-aio/03-dashboards.png</Screenshot>
   <ExtraParams/>
   <PostArgs/>
   <CPUset/>

simplelogin-aio.xml

@@ -38,12 +38,16 @@
 - Harden internal Postgres auth defaults
 - Restrict SimpleLogin state dir permissions
 - Default registration to disabled</Changes>
-  <Category>Network:Privacy Network:Web</Category>
+  <Category>Network:Privacy Network:Web Tools:Utilities</Category>
   <WebUI>http://[IP]:[PORT:7777]</WebUI>
   <TemplateURL>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/simplelogin-aio.xml</TemplateURL>
+  <ReadMe>https://github.com/JSONbored/simplelogin-aio#readme</ReadMe>
   <Icon>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/icons/simplelogin.jpeg</Icon>
   <ExtraSearchTerms>email alias privacy forwarding self-hosted proton mail postfix smtp dkim</ExtraSearchTerms>
   <Requires>**For full inbound mail delivery:** a public domain, correct DNS records, and inbound TCP 25 forwarded to your Unraid host. If outbound TCP 25 is blocked, use an SMTP relay mode instead of direct delivery.</Requires>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/simplelogin-aio/01-login.png</Screenshot>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/simplelogin-aio/02-dashboard.png</Screenshot>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/simplelogin-aio/03-settings.png</Screenshot>
   <ExtraParams/>
   <PostArgs/>
   <CPUset/>

sure-aio-alpha.xml

@@ -38,21 +38,23 @@ This template is meant for testing and local validation, not primary household f
 - Enforce capped alpha import limits and structured malformed Account preflight errors.
 - Derive external assistant session keys when operators leave the shared key blank.
 - Tighten first-boot database readiness so Rails waits for authenticated PostgreSQL access.</Changes>
-  <Category>Productivity: Tools:Utilities</Category>
+  <Category>Productivity Tools:Utilities</Category>
   <Beta>True</Beta>
   <WebUI>http://[IP]:[PORT:3000]</WebUI>
   <TemplateURL>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/sure-aio-alpha.xml</TemplateURL>
+  <ReadMe>https://github.com/JSONbored/sure-aio#alpha-testing-lane</ReadMe>
   <Icon>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/icons/sure.png</Icon>
   <ExtraSearchTerms>finance budgeting personal-finance net-worth money maybe-finance sure plaid bank accounts alpha testing prerelease</ExtraSearchTerms>
-  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/sure-aio/01-dashboard.png</Screenshot>
-  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/sure-aio/02-account-activity.png</Screenshot>
-  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/sure-aio/03-budgets.png</Screenshot>
+  <Requires>Testing lane only. Do not point this template at stable [code]sure-aio[/code] appdata, keep backups, and expect upstream alpha migrations or behavior changes. Generate a strong [code]SECRET_KEY_BASE[/code] before first boot.</Requires>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/sure-aio-alpha/01-login.png</Screenshot>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/sure-aio-alpha/02-account-activity.png</Screenshot>
+  <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/sure-aio-alpha/03-budgets.png</Screenshot>
   <ExtraParams/>
   <PostArgs/>
   <CPUset/>
   <DateInstalled/>
-  <DonateText/>
-  <DonateLink/>
+  <DonateText>Support JSONbored on GitHub Sponsors.</DonateText>
+  <DonateLink>https://github.com/sponsors/JSONbored</DonateLink>
   <Description/>
   <Networking>
     <Mode>bridge</Mode>

sure-aio.xml

@@ -36,20 +36,22 @@
 - Harden Sure runtime, template secret masking, and release paths.
 - Derive external assistant session keys when operators leave the shared key blank.
 - Tighten first-boot database readiness so Rails waits for authenticated PostgreSQL access.</Changes>
-  <Category>Productivity: Tools:Utilities</Category>
+  <Category>Productivity Tools:Utilities</Category>
   <WebUI>http://[IP]:[PORT:3000]</WebUI>
   <TemplateURL>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/sure-aio.xml</TemplateURL>
+  <ReadMe>https://github.com/JSONbored/sure-aio#readme</ReadMe>
   <Icon>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/icons/sure.png</Icon>
   <ExtraSearchTerms>finance budgeting personal-finance net-worth money maybe-finance sure plaid bank accounts</ExtraSearchTerms>
+  <Requires>Generate and keep a strong [code]SECRET_KEY_BASE[/code] before first boot, and back up Rails storage, PostgreSQL, and Redis appdata before upgrades. Use external PostgreSQL, Redis, storage, SMTP, or provider settings only when you intentionally move beyond the bundled AIO defaults.</Requires>
   <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/sure-aio/01-dashboard.png</Screenshot>
   <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/sure-aio/02-account-activity.png</Screenshot>
   <Screenshot>https://raw.githubusercontent.com/JSONbored/awesome-unraid/main/screenshots/sure-aio/03-budgets.png</Screenshot>
   <ExtraParams/>
   <PostArgs/>
   <CPUset/>
   <DateInstalled/>
-  <DonateText/>
-  <DonateLink/>
+  <DonateText>Support JSONbored on GitHub Sponsors.</DonateText>
+  <DonateLink>https://github.com/sponsors/JSONbored</DonateLink>
   <Description/>
   <Networking>
     <Mode>bridge</Mode>