That’s why you should disable notifications for apps who shows sensitive information.

Signal does a good way of doing it they only signal (hehe) their app that their is a notification, then the apps gets this information itself.

portainer is not free to use correct? Alternatively one could use unraid (provides nfs, vms and docker management)