unifi-network-application

10.6.106-ls151

The unifi-network-application software is a powerful, enterprise wireless software engine ideal for high-density client deployments requiring low latency and high uptime performance.

Network

docker pull lscr.io/linuxserver/unifi-network-application:latest

Quick start

Generated from the image's own configuration. Replace the /path/to folders with real paths on your host.

Include optional settings

---
services:
  unifi-network-application:
    image: lscr.io/linuxserver/unifi-network-application:latest
    container_name: unifi-network-application
    environment:
      - MONGO_USER=unifi
      - MONGO_PASS=
      - MONGO_HOST=unifi-db
      - MONGO_PORT=27017
      - MONGO_DBNAME=unifi
      - MONGO_AUTHSOURCE=admin
      - MEM_LIMIT=1024 # optional
      - MEM_STARTUP=1024 # optional
      - MONGO_TLS= # optional
    volumes:
      - /path/to/unifi-network-application/data:/config
    ports:
      - 8443:8443
      - 3478:3478/udp
      - 10001:10001/udp
      - 8080:8080
      - 1900:1900/udp # optional
      - 8843:8843 # optional
      - 8880:8880 # optional
      - 6789:6789 # optional
      - 5514:5514/udp # optional
    restart: unless-stopped

Parameters

Ports
Port	Function	Required
8443:8443	Unifi web admin port	required
3478:3478/udp	Unifi STUN port	required
10001:10001/udp	Required for AP discovery	required
8080:8080	Required for device communication	required
1900:1900/udp	Required for `Make controller discoverable on L2 network` option	optional
8843:8843	Unifi guest portal HTTPS redirect port	optional
8880:8880	Unifi guest portal HTTP redirect port	optional
6789:6789	For mobile throughput test	optional
5514:5514/udp	Remote syslog port	optional

Environment variables
Variable	Function	Required
MONGO_USER=unifi	Mongodb Username. Only evaluated on first run. Special characters must be [url encoded](https://en.wikipedia.org/wiki/Percent-encoding).	required
MONGO_PASS=	Mongodb Password. Only evaluated on first run. Special characters must be [url encoded](https://en.wikipedia.org/wiki/Percent-encoding).	required
MONGO_HOST=unifi-db	Mongodb Hostname. Only evaluated on first run.	required
MONGO_PORT=27017	Mongodb Port. Only evaluated on first run.	required
MONGO_DBNAME=unifi	Mongodb Database Name (stats DB is automatically suffixed with `_stat`). Only evaluated on first run.	required
MONGO_AUTHSOURCE=admin	Mongodb [authSource](https://www.mongodb.com/docs/manual/reference/connection-string/#mongodb-urioption-urioption.authSource). For Atlas set to `admin`. Only evaluated on first run.	required
MEM_LIMIT=1024	Optionally change the Java memory limit (in Megabytes). Set to `default` to reset to default	optional
MEM_STARTUP=1024	Optionally change the Java initial/minimum memory (in Megabytes). Set to `default` to reset to default	optional
MONGO_TLS=	Mongodb enable [TLS](https://www.mongodb.com/docs/manual/reference/connection-string/#mongodb-urioption-urioption.tls). Only evaluated on first run.	optional

Volumes
Path	Function	Required
/config	Persistent config files	required

Architectures

Pulling :latest picks the right one for your host automatically.

x86_64amd64-latest
arm64arm64v8-latest

Changelog

14 Jul 2026
Rebase to Ubuntu Resolute.
20 Apr 2026
Bump JRE to v25 to support v10.3+ of the application.
20 Oct 2025
Switch to using FW API endpoint for version checks.

Browse all

wireguard

1.0.20260223-r0-ls127

WireGuard® is an extremely simple yet fast and modern VPN that utilizes state-of-the-art cryptography. It aims to be faster, simpler, leaner, and more useful than IPsec, while avoiding the massive headache. It intends to be considerably more performant than OpenVPN. WireGuard is designed as a general purpose VPN for running on embedded interfaces and super computers alike, fit for many different circumstances. Initially released for the Linux kernel, it is now cross-platform (Windows, macOS, BSD, iOS, Android) and widely deployable. It is currently under heavy development, but already it might be regarded as the most secure, easiest to use, and simplest VPN solution in the industry.

1M3.6Karm64

duckdns

8d8f7eba-ls94

duckdns is a free service which will point a DNS (sub domains of duckdns.org) to an IP of your choice. The service is completely free, and doesn't require reactivation or forum posts to maintain its existence.

772K376arm64

ddclient

v4.0.0-ls236

ddclient is a Perl client used to update dynamic DNS entries for accounts on Dynamic DNS Network Service Provider. It was originally written by Paul Burry and is now mostly by wimpunk. It has the capability to update more than just dyndns and it can fetch your WAN-ipaddress in a few different ways.

388K182arm64

adguardhome-sync

v0.9.4-ls178

adguardhome-sync is a tool to synchronize AdGuardHome config to replica instances.

188K65arm64