[{"_1":2,"_191":-5,"_192":-5},"loaderData",{"_3":4,"_18":19,"_25":26,"_166":167},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16,"_17":11},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","dockerRebrandTour","routes/_layout",{"_20":-5,"_21":22,"_23":11,"_24":22},"username","isAskGordonEnabled",true,"showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_27":28,"_29":-5,"_30":11,"_31":11,"_32":33,"_34":35,"_36":-5,"_37":11,"_38":39,"_89":90,"_109":110,"_154":-5,"_155":11,"_156":22,"_157":11,"_158":11,"_159":-5,"_160":11,"_161":-5,"_162":163,"_164":111,"_165":-7},"canonicalUrl","https://hub.docker.com/r/opencue/cueweb/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","opencue","reponame","cueweb","cloudBuildSource","isAutobuildsAvailable","repo",{"_40":41,"_42":43,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":55,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":73,"_74":75,"_80":11,"_81":82,"_86":33,"_87":88},"categories",[],"content_types",[44],"image","date_registered","2026-10-21T14:36:28.501398Z","description","A web client for OpenCue","is_private","last_updated","2026-10-21T14:52:13.214157Z","last_modified","2026-10-21T18:13:04.483798Z","media_types",[56],"application/vnd.docker.container.image.v1+json","name","pull_count",55,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","# OpenCue CueWeb\n\n[OpenCue](https://www.opencue.io) is an open source render management system for visual effects and animation production, hosted by the [Academy Software Foundation](https://www.aswf.io).\n\n**CueWeb** is the OpenCue web interface. It brings the CueGUI workflow (Cuetopia job monitoring plus the CueCommander admin views) to the browser: job, layer and frame tables with filtering and multi-select actions, frame log viewing, host, allocation, limit, service, show and subscription management, job submission, dashboards, a plugin system and light/dark themes.\n\nCueWeb does not talk to Cuebot over gRPC. Every request is proxied server-side through the [OpenCue REST Gateway](https://hub.docker.com/r/opencue/rest-gateway) and signed with a JWT, so browsers never hold gateway credentials.\n\n- Documentation: https://docs.opencue.io/docs/getting-started/deploying-cueweb/\n- User guide: https://docs.opencue.io/docs/user-guides/cueweb-user-guide/\n- Source: https://github.com/AcademySoftwareFoundation/OpenCue/tree/master/cueweb\n- Community: `#opencue` on the [ASWF Slack](https://slack.aswf.io)\n\n## Tags\n\n| Tag | Description |\n|---|---|\n| `latest` | Most recent OpenCue release |\n| `` (for example `1.37.0`) | A specific release. Pin this in production |\n\nRelease notes: https://github.com/AcademySoftwareFoundation/OpenCue/releases\n\n## What CueWeb needs\n\n1. A running **Cuebot** with its PostgreSQL database.\n2. A running **REST Gateway** pointed at that Cuebot (`opencue/rest-gateway`).\n3. The **JWT secret** the gateway trusts, that is the gateway container's `JWT_SECRET`. CueWeb signs every gateway call with it.\n4. Optionally, read access to the frame log root (the path RQD writes logs to) so the log viewer can read `.rqlog` files.\n\nWithout a reachable gateway the UI still loads, but the tables stay empty and the status bar reports the gateway as offline.\n\n## Quick start\n\nFor a complete local OpenCue deployment (PostgreSQL, Cuebot, RQD, REST Gateway, CueWeb and optional monitoring), use the `docker-compose.yml` in the repository:\n\n```bash\ngit clone https://github.com/AcademySoftwareFoundation/OpenCue.git\ncd OpenCue\ndocker compose --profile cueweb up -d\n```\n\nCueWeb is then on http://localhost:3000.\n\nTo run the published image against an existing gateway:\n\n```bash\ndocker run -d --name cueweb -p 3000:3000 \\\n -e CUEBOT_LOCAL_REST_GATEWAY_URL=http://:8448 \\\n -e CUEBOT_LOCAL_JWT_SECRET= \\\n -e NEXTAUTH_URL=http://localhost:3000 \\\n -e NEXTAUTH_SECRET=$(openssl rand -base64 32) \\\n -e GOOGLE_CLIENT_ID= -e GOOGLE_CLIENT_SECRET= \\\n -v /shots/logs:/shots/logs:ro \\\n opencue/cueweb\n```\n\n`CUEBOT_LOCAL_*` configures the default `local` facility (see Cuebot facilities below) and takes preedence over the gateway URL baked into the image. The Google credentials are an example: the published image ships with authentication enabled, so configure at least one provider or rebuild the image with authentication off (see below).\n\nMount the frame log root at the same path the render hosts write it to, otherwise the log viewer cannot find the files.\n\n## Build-time versus runtime configuration\n\nCueWeb is a Next.js application, so every `NEXT_PUBLIC_*` value is **inlined into the bundle when the image is built**. Setting a `NEXT_PUBLIC_*` variable with `docker run -e` has no effect on the published image. Everything else is read at request time and can be set normally with `-e`.\n\nValues baked into the published image:\n\n| Build arg | Value in the published image | Purpose |\n|---|---|---|\n| `NEXT_PUBLIC_OPENCUE_ENDPOINT` | `http://localhost:8448` | Default REST gateway base URL. Override at runtime with `CUEBOT__REST_GATEWAY_URL` instead of rebuilding |\n| `NEXT_PUBLIC_URL` | empty | Empty means the browser builds same-origin relative API URLs, so CueWeb works on whatever host users reach it on. Set only if the API is served from a different origin |\n| `NEXT_PUBLIC_AUTH_PROVIDER` | `google,okta,github,ldap` | Sign-in providers offered. Rebuild with an empty value to disable authentication entirely |\n| `NEXT_PUBLIC_CUEBOT_FACILITIES` | unset, so `local,dev,cloud,external` | Facilities listed in the Cuebot Facility menu |\n| `NEXT_PUBLIC_LOKI_URL` | unset | When set, the log viewer queries a Grafana Loki server by frame id instead of reading `.rqlog` files |\n| `NEXT_PUBLIC_LOG_EDITOR_URL` | empty | Optional URL template for \"View Log on \", for example `vscode://file{path}` |\n| `NEXT_PUBLIC_CUEPROGBAR_URL` | empty | Optional URL scheme used by \"Show Progress Bar\" |\n| `NEXT_PUBLIC_CUEPROGBAR_COMMAND` | `python -m cuegui.cueguiplugin.cueprogbar {job}` | Command shown in the progress bar dialog |\n| `NEXT_PUBLIC_PREVIEW_COMMAND` / `NEXT_PUBLIC_PREVIEW_URL` | `rv {paths}` / empty | External image viewer used by \"Preview All\" |\n\nTo rebuild with your own values (the repo root must be available as the `project_root` context, which supplies the shared `VERSION.in`):\n\n```bash\ncd OpenCue/cueweb\ndocker buildx build . -f Dockerfile -t mysite/cueweb:local \\\n --build-context project_root=.. \\\n --build-arg NEXT_PUBLIC_OPENCUE_ENDPOINT=http://rest-gateway:8448 \\\n --build-arg NEXT_PUBLIC_AUTH_PROVIDER= \\\n --build-arg NEXT_PUBLIC_GIT_SHA=$(git rev-parse --short HEAD)\n```\n\n## Runtime configuration\n\n| Variable | Default | Purpose |\n|---|---|---|\n| `CUEBOT__REST_GATEWAY_URL` | falls back to the baked endpoint | REST gateway for that facility, for example `CUEBOT_LOCAL_REST_GATEWAY_URL`. Facility names are upper-cased, non-alphanumerics become `_` |\n| `CUEBOT__JWT_SECRET` | falls back to `NEXT_JWT_SECRET` | Signing secret for that facility's gateway |\n| `NEXT_JWT_SECRET` | `tobeoverriden` | Default gateway signing secret. Must match the gateway's `JWT_SECRET` |\n| `NEXTAUTH_URL` | `tobeoverriden` | Public URL of this CueWeb instance, used for OAuth callbacks |\n| `NEXTAUTH_SECRET` | `tobeoverriden` | Secret used to encrypt session tokens |\n| `NEXT_AUTH_OKTA_CLIENT_ID`, `NEXT_AUTH_OKTA_ISSUER`, `NEXT_AUTH_OKTA_CLIENT_SECRET` | `tobeoverriden` | Okta credentials. Replace the placeholders or the Okta button will fail |\n| `GOOGLE_CLIENT_ID`, `GOOGLE_CLIENT_SECRET` | unset | Google credentials |\n| `GITHUB_ID`, `GITHUB_SECRET` | unset | GitHub credentials |\n| `LDAP_URI`, `LDAP_LOGIN_DN`, `LDAP_CERTIFICATE` | `tobeoverriden` | LDAP credentials for the Domain Account login |\n| `CUEWEB_AUTHZ_ENABLED` | `false` | Opt-in group-based authorization gate |\n| `CUEWEB_ALLOWED_GROUPS` | empty | Groups allowed to use CueWeb at all. Empty means every signed-in user |\n| `CUEWEB_ADMIN_GROUPS` | empty | Groups allowed to use CueCommander, job submission and facility management. Empty means every signed-in user is an admin |\n| `CUEWEB_GROUPS_CLAIM` | `groups` | Token claim carrying the user's groups |\n| `CUEWEB_FACILITY_STORE` | `/cueweb-facilities.json` | Where runtime facility overrides made from the Manage facilities screen are stored. Point it at a mounted volume to keep them across container replacements |\n| `CUEWEB_PREVIEW_ROOTS` | unset | Colon-separated allow-list of roots the frame preview file server may read. Unset means the route fails closed |\n| `SENTRY_DSN`, `SENTRY_URL`, `SENTRY_ORG`, `SENTRY_PROJECT`, `SENTRY_ENVIRONMENT` | `tobeoverriden` | Optional Sentry monitoring. Leave `SENTRY_DSN` unset to disable |\n\nA provider only appears on the sign-in page when all of its credentials are present, so you can enable just the ones your site uses.\n\n## Ports, volumes and endpoints\n\n| | |\n|---|---|\n| `3000/tcp` | HTTP, the CueWeb UI and its API routes |\n| frame log root | Mount read-only at the same path RQD writes logs to, for example `-v /shots/logs:/shots/logs:ro` |\n| `/api/health` | Gateway reachability and round-trip latency for the selected facility |\n| `/api/metrics` | Prometheus metrics |\n\nThe image runs `npm run start` from `/opt/cueweb` as a standard Next.js server. Put it behind your usual reverse proxy for TLS and set `NEXTAUTH_URL` to the public URL.\n\n## Upgrading\n\nUpgrade CueWeb together with Cuebot and the REST Gateway, since all three track the same OpenCue release. Pull the new tag and replace the container. There is no database to migrate. User preferences live in the browser's local storage, and runtime facility overrides live in the file named by `CUEWEB_FACILITY_STORE`, which defaults to a path under the container's temporary directory and is therefore lost unless you mount it.\n\n## License\n\nApache License 2.0. See [LICENSE](https://github.com/AcademySoftwareFoundation/OpenCue/blob/master/LICENSE).\n","has_starred","hub_user","dtavaresspi","immutable_tags_settings",{"_76":11,"_77":78},"enabled","rules",[79],".*","is_automated","permissions",{"_83":22,"_84":11,"_85":11},"read","write","admin","user","storage_size",691200998,"orgData",{"_91":92,"_93":94,"_95":96,"_97":33,"_98":99,"_100":99,"_101":99,"_102":99,"_103":104,"_105":99,"_106":99,"_107":99,"_108":22},"id","7069c063a97e46ff96bd29be2678a83e","uuid","7069c063-a97e-46ff-96bd-29be2678a83e","type","organization","orgname","full_name","","location","company","profile_url","date_joined","2019-01-15T17:25:49.869956Z","gravatar_url","gravatar_email","badge","is_active","recentTags",[111,148],{"_112":44,"_113":114,"_115":116,"_117":118,"_91":119,"_120":121,"_50":136,"_137":114,"_138":139,"_140":56,"_57":141,"_142":143,"_144":127,"_145":136,"_146":66,"_147":22},"content_type","creator",5139932,"digest","sha256:7b84746b73782271b4c1c93720af7ee9d542ff6cab4c53168aa6c64a00743c96","full_size",691178902,1358926893,"images",[122],{"_123":124,"_115":116,"_125":99,"_126":127,"_128":129,"_130":131,"_132":99,"_133":-5,"_134":118,"_63":66,"_135":-5},"architecture","amd64","features","last_pulled","2026-10-31T14:14:57.064088546Z","last_pushed","2026-10-21T14:52:07.56525733Z","os","linux","os_features","os_version","size","variant","2026-10-21T14:52:11.181466Z","last_updater","last_updater_username","opencueauto","media_type","latest","repository",32982503,"tag_last_pulled","tag_last_pushed","tag_status","v2",{"_112":44,"_113":114,"_115":116,"_117":118,"_91":149,"_120":150,"_50":152,"_137":114,"_138":139,"_140":56,"_57":153,"_142":143,"_144":127,"_145":152,"_146":66,"_147":22},1358926616,[151],{"_123":124,"_115":116,"_125":99,"_126":127,"_128":129,"_130":131,"_132":99,"_133":-5,"_134":118,"_63":66,"_135":-5},"2026-10-21T14:52:07.866011Z","1.37.0","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxRunInCloud","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.tags",{"_38":168,"_175":176,"_162":189,"_190":11},{"_40":169,"_42":170,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":171,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":73,"_74":172,"_80":11,"_81":174,"_86":33,"_87":88},[],[44],[56],{"_76":11,"_77":173},[79],{"_83":22,"_84":11,"_85":11},"tags",{"_177":178,"_179":-5,"_180":-5,"_181":182},"count",2,"next","previous","results",[183,186],{"_112":44,"_113":114,"_115":116,"_117":118,"_91":119,"_120":184,"_50":136,"_137":114,"_138":139,"_140":56,"_57":141,"_142":143,"_144":127,"_145":136,"_146":66,"_147":22},[185],{"_123":124,"_115":116,"_125":99,"_126":127,"_128":129,"_130":131,"_132":99,"_133":-5,"_134":118,"_63":66,"_135":-5},{"_112":44,"_113":114,"_115":116,"_117":118,"_91":149,"_120":187,"_50":152,"_137":114,"_138":139,"_140":56,"_57":153,"_142":143,"_144":127,"_145":152,"_146":66,"_147":22},[188],{"_123":124,"_115":116,"_125":99,"_126":127,"_128":129,"_130":131,"_132":99,"_133":-5,"_134":118,"_63":66,"_135":-5},[],"canDeleteTags","actionData","errors"]

opencue/cueweb

Tags for opencue/cueweb