Skip to main content
  1. Tutorials/

Keeping Unraid Updated and Secure

Difficulty Beginner
Time ~20 min
Stack
Unraid Security

A fresh Unraid install communicates over unencrypted HTTP and has no connection to the update system. Before adding services, it is worth taking twenty minutes to fix both of those things. This guide walks through installing Unraid Connect, checking for OS updates, and enabling HTTPS for the web UI using a free Let’s Encrypt certificate.

Executive Summary
#

We will install the Unraid Connect plugin, use it to check whether the OS is current and understand the difference between the Stable and Next update branches, then provision a free Let’s Encrypt SSL certificate through the Management Access settings page and enable HTTPS. We will also confirm SSH is enabled for terminal access. By the end, your server will be reachable over a secure HTTPS connection and connected to the Unraid update system.

Prerequisites
#

ComponentRequirement
Unraid ServerRunning server with array started and web UI accessible
Unraid AccountFree account at account.unraid.net
Community ApplicationsInstalled (see Installing Essential Plugins on Unraid)
NetworkServer connected to the internet

Assumptions: This guide follows on from Installing Essential Plugins on Unraid. You will need a free Unraid account to link your server. If you do not have one, create one at account.unraid.net before starting.

Implementation
#

Step 1: Install Unraid Connect
#

Unraid Connect is the official plugin that links your server to your Unraid account. It enables OS update management and SSL certificate provisioning. It is installed through the Apps tab like any other plugin.

  1. Click Apps in the top navigation bar.
  2. Type Unraid Connect in the search bar and press Enter.
  3. Find the result from limetech and click Install.

CA search results showing the Unraid Connect plugin from limetech with Monthly Spotlight badge
Unraid Connect by limetech is the first result. The Monthly Spotlight badge confirms it is actively maintained.

Unraid Connect is larger than most plugins because it includes a Node.js-based API service. The install takes a minute or two.

Install Plugin - In Progress screen showing Unraid Connect downloading
The install begins by downloading the plugin. The output grows significantly as it installs dependencies and starts the API service.

When the install finishes, the output will confirm that the Unraid API service started successfully.

Install Plugin - Finished screen showing Unraid Connect installed with API service running
A successful install ends with “Unraid API service started” and “Installation is complete, it is safe to close this window.” Click Done.

Step 2: Verify the Plugin Is Listed
#

Navigate to Plugins in the top navigation bar to confirm Unraid Connect is installed.

Plugins tab showing all five plugins installed including Unraid Connect with not available status
Unraid Connect now appears in the Installed Plugins list. The status may show “not available” until you run Check for Updates.

Click Check for Updates in the top right corner to verify all plugins are current.

Plugins tab showing all five plugins with green up-to-date status
All five plugins showing up-to-date. Your server can reach the plugin repositories and everything is on the latest version.

Step 3: Sign In to Your Unraid Account
#

Before you can check for OS updates or provision an SSL certificate, your server needs to be linked to your Unraid account. Click the hamburger menu in the top right corner of the web UI to open the Connect panel, then click Sign In with Unraid.net Account and complete the sign-in flow in the new tab that opens.

Unraid dashboard showing the Connect panel with Sign In with Unraid.net Account button
The Connect panel is accessible from the hamburger menu at any time. Sign in with your Unraid forum credentials to link the server. This is required for OS update checks and SSL certificate provisioning.

Step 4: Check for OS Updates
#

With Unraid Connect installed, the Tools tab gains access to the OS update system. This connects to your Unraid account at account.unraid.net to check for available releases.

  1. Click Tools in the top navigation bar.

Unraid Tools page showing Update OS and Downgrade OS tiles under the About section
The Tools page. Update OS is under the About section. Downgrade OS is also available here if you ever need to roll back a release.

  1. Click Update OS.

Update OS page with the orange View Available Updates button
The Update OS page. Clicking View Available Updates opens a new tab and connects to your Unraid account to check the current release status.

  1. Click View Available Updates. Your browser will open a new tab at account.unraid.net.

You will see two intermediate screens as the account app decodes the link and checks your server against the update system.

account.unraid.net ingest screen showing four server lookup checks with Load callback details done and Check server action in progress
The first screen matches your server to the right account action. It runs four checks in sequence: loading callback details, checking the server action, checking the OS snapshot, and loading release details.

account.unraid.net callback screen showing Decode callback data, Save callback context, and Continue to next step all completing
The second screen finalises the handoff and routes you to the correct page. All three steps completing with Done confirms the connection succeeded.

Once the checks complete, the Update OS section will load inside your Unraid account dashboard.

account.unraid.net Update OS tab loading with animated spinner
The Update OS section loading inside the account dashboard. If the spinner stays for more than 30 seconds, refresh the page.

Step 5: Confirm You Are on the Stable Branch
#

The Update OS page has two tabs: Stable and Next. Always stay on the Stable tab for a home lab server.

  1. Click the Stable tab if it is not already selected.

account.unraid.net showing the Stable tab selected with message that no newer stable releases are available
The Stable tab showing “No newer stable releases are available” confirms the server is running the latest stable version of Unraid OS. Active OS Version 7.2.4 (stable) is shown in the server header.

Note: The Next tab shows pre-release builds intended for testing. These may contain bugs or incomplete features and should not be used on a server you rely on. If you see a badge on the Next tab showing a newer version number, ignore it.

account.unraid.net Next tab showing pre-release disclaimer and beta versions listed
The Next tab includes a prominent pre-release disclaimer. Checking “I understand and accept the risks” is required before the install buttons become active. Leave this tab alone on a production server.

If the Stable tab shows a newer version available, click Install Update and allow the server to reboot. Come back to this guide after the update completes.

Note: While you are in the account app, the server header at the top shows your license state, GUID, and active OS version. This is also where you manage your license key if you are upgrading from a trial to a paid license.

Step 6: Provision an SSL Certificate
#

By default, Unraid uses unencrypted HTTP. Provisioning a free Let’s Encrypt certificate through Management Access gives your server a trusted HTTPS connection using a unique myunraid.net subdomain tied to your server’s GUID.

  1. Click Settings in the top navigation bar.
  2. Click Management Access.

Management Access settings page showing SSH enabled, SSL/TLS set to No, and the Provision button at the bottom
The Management Access page. Use SSH is already set to Yes, which is correct. Use SSL/TLS is set to No. The Provision button at the bottom is what generates the Let’s Encrypt certificate.

  1. Scroll to the bottom of the page and click Provision.

Management Access page scrolled to show the Provision button with CA-signed certificate file showing Not present
Before provisioning, the CA-signed certificate file shows “Not present.” Clicking Provision contacts Let’s Encrypt and installs the certificate automatically.

Unraid will contact Let’s Encrypt and generate a certificate tied to your server’s GUID. This takes about 30 seconds. When it finishes, the page will update to show the new certificate details and your myunraid.net URL will appear in the Local Access URLs section.

Management Access page after provisioning showing the Let’s Encrypt certificate details and myunraid.net URL in Local Access URLs
After provisioning, the Unraid Let’s Encrypt certificate section shows the certificate path, the myunraid.net Certificate URL, the issuer (Let’s Encrypt CN=R12), and the expiration date. The myunraid.net URL also appears in Local Access URLs.

Step 7: Enable HTTPS
#

With the certificate provisioned, scroll back up and enable SSL/TLS.

  1. Click the Use SSL/TLS dropdown.

Management Access page showing the Use SSL/TLS dropdown open with No, Yes, and Strict options
The SSL/TLS dropdown has three options. No disables HTTPS entirely. Yes enables HTTPS and redirects HTTP traffic. Strict enforces HTTPS only with no HTTP fallback. Select Yes.

  1. Select Yes.

Management Access page with Use SSL/TLS set to Yes showing the Apply button and a warning about clearing browser cache
With Yes selected, a warning appears reminding you to close other tabs pointing to the server and clear your browser cache if you have trouble logging in after applying. Click Apply.

  1. Click Apply.

The page will reload. Your server is now accessible over HTTPS. The Local Access URLs section will show three access options: the IP address over HTTPS, the hostname over HTTPS, and the full myunraid.net URL which uses the trusted Let’s Encrypt certificate.

Management Access page after enabling SSL showing HTTPS URLs in Local Access URLs and the Let’s Encrypt certificate details
After applying, all three Local Access URLs redirect to HTTPS. The IP and hostname URLs use the self-signed certificate and will show a browser warning. The myunraid.net URL uses the trusted Let’s Encrypt certificate and will not show a warning. Use the myunraid.net URL as your primary bookmark going forward.

Note: Bookmark the myunraid.net URL from the Local Access URLs section. Accessing the server by IP or hostname over HTTPS will show a browser security warning because those addresses use the self-signed certificate. The myunraid.net URL is the one backed by the trusted Let’s Encrypt certificate.

Step 8: Confirm SSH Is Enabled
#

While on the Management Access page, confirm SSH is enabled. SSH (Secure Shell) is the standard way to access your server’s terminal remotely. You will need it for later tutorials.

On the same Management Access page, scroll up and verify Use SSH is set to Yes and SSH port is set to 22.

Management Access page showing Use SSH set to Yes and SSH port 22
Use SSH set to Yes confirms the SSH server is running on port 22. Key-based SSH authentication was covered in detail in Managing Users and Permissions in Unraid.

Note: If you have not set up key-based SSH authentication yet, see Managing Users and Permissions in Unraid for the full walkthrough.

Lab Notes & Troubleshooting
#

The Update OS page spins indefinitely after clicking View Available Updates. Your server needs to be linked to an Unraid account for the connection to complete. Make sure you are signed in at account.unraid.net. If the spinner continues after 30 seconds, refresh the page and try again.

Provision button does nothing or returns an error. This usually means the server is not linked to an Unraid account. Navigate to Settings > Unraid Connect and confirm the account link status. If it shows as not connected, sign in from there first.

After enabling SSL/TLS, the browser shows a security warning. This is expected if you are accessing the server by IP address or hostname. Those addresses use the built-in self-signed certificate. Switch to the myunraid.net URL shown in Local Access URLs to get the trusted Let’s Encrypt certificate with no browser warning.

The myunraid.net URL is not accessible from outside my network. The myunraid.net URL is designed for local network access only. It resolves to your server’s local IP address and uses the Let’s Encrypt certificate for trust. It does not expose your server to the internet. For remote access see Setting Up a Cloudflare Tunnel.

Use SSL/TLS dropdown shows Strict as an option. Should I use it? Strict mode enforces HTTPS only and drops all HTTP connections with no fallback. It is more secure but means you cannot access the web UI at all over plain HTTP, even on the local network. Yes is the recommended starting point. You can switch to Strict later once you are confident everything is working correctly over HTTPS.

Summary
#

Your Unraid server is now connected to the update system, confirmed to be running the latest stable OS, and accessible over a trusted HTTPS connection using a free Let’s Encrypt certificate. SSH is enabled for terminal access. The next guide covers setting up Docker networks so containers can communicate with each other.

Next Step: Configuring Docker Networks in Unraid


Disclaimer: Content on this site is provided as-is with no guarantees of accuracy, completeness, or fitness for any particular purpose. Always test in a safe, non-production environment before applying anything documented here to systems you rely on. I am not responsible for data loss, damage, or security issues resulting from following these guides. Software and services change over time and steps that worked when this was written may not work in the future.