taskmgr is intended for trusted administrators monitoring their own Docker host. It is not designed as a multi-tenant service.

Runtime data can include container names, image names, Compose service names, cgroup paths, init PIDs, and performance metrics. These can reveal private project names or local infrastructure details.

The repository ignores .env, local databases, logs, and runtime state by default. Do not attach taskmgr.db, Docker volumes, screenshots, or logs to a public issue without reviewing them first.

• Keep the default localhost bind unless you have a specific reason to expose the UI elsewhere.
• Put remote access behind TLS and another access-control layer.
• Use a long random password.
• Password changes require the current password and invalidate all sessions.
• Set TASKMGR_TRUSTED_PROXIES only to CIDRs for reverse proxies you control.
• Avoid leaving TASKMGR_PASSWORD_RESET in the container environment after a reset.
• Review the Compose privileges before enabling GPU metrics.

If you find a security issue, please open a private advisory on GitHub or contact the maintainer privately. Include a minimal reproduction and avoid sharing private host/container names when possible.