Search by application name or purpose. Filter by category when you already know the kind of service you need.
Showing all 217 applications.
Gather forensic artifacts from disk images or a live system into a single archive. Acquire uses the Dissect framework: it collects modules (paths/globs) by profile (full, default, minimal, none) and outputs a lightweight container for triage. Supports VMDK, E01, and other formats via Dissect; optional volatile (memory) collection.
What to knowActual Budget is a local-first, open-source budgeting app with envelope-style budgeting and optional sync. This stack runs the Actual sync server so you can use the desktop/mobile app with cloud sync. No host ports; put it behind Caddy.
What to knowNetwork-wide DNS-level ad and tracker blocking. Run AdGuard Home on your Docker host as the primary DNS server for your LAN and expose the web UI via Caddy.
What to knowAFFiNE is a self-hosted collaborative knowledge workspace combining docs, whiteboards, and a knowledge graph in one app.
What to knowCoverage-guided fuzzing toolbox (AFL++ and libFuzzer) for discovering crashes and vulnerabilities in binaries and libraries.
What to knowThe locally built AIL 7 image includes a dark interface theme. The runtime image appends ail-dark-mode.css to AIL's shared Bootstrap stylesheet so the theme covers the login, settings, dashboard, table, form, and modal templates without maintaining forks of upstream HTML. It also appends ail-dark-mode.js to ECharts so canvas-rendered charts use the bundled dark theme.
What to knowPrometheus Alertmanager for routing alerts (email, webhooks, chat, etc.) based on labels. Use it together with the Prometheus stack in this repo to turn metrics into actionable notifications.
What to knowAnythingLLM is a RAG workspace for uploading documents, building vector workspaces, and chatting with Ollama or other model providers. The default vector database is LanceDB.
What to knowAppFlowy self-hosting stack scaffold for Caddy/Portainer deployment.
What to knowSteam card idling and automation. ASF runs in the background, optionally exposing a web IPC (API + ASF-ui) for management. Access via Caddy at https://asf.yourdomain.com (or your configured hostname).
What to knowSelf-hosted web archive: save full copies of web pages (HTML, screenshots, PDFs, and WARCs) from URLs, bookmarks, and feeds.
What to knowLightweight self-hosted strawpoll-style polling app with a Next.js frontend and Node.js API backed by PostgreSQL.
What to knowAtomic Red Team is a library of small, portable adversary-simulation tests mapped to MITRE ATT&CK techniques.
What to knowSelf-hosted podcast (and audiobook) server: subscribe to podcasts, stream or download episodes, sync progress across web and mobile apps.
What to knowHTTP authentication fuzzer for testing login endpoints against wordlists and brute-force attack patterns.
What to knowauthentik is an open-source identity provider and access management platform. It can act as an OIDC/OAuth2/SAML IdP for your other stacks (e.g. Outline, Grafana, Immich, Linkwarden) and integrates well with reverse proxies and Kubernetes/containers.
What to knowLocal LLM-powered PII redaction service. Accepts document uploads and returns redacted PDFs with personal information blacked out. Runs entirely on-prem, no data leaves the host.
What to knowBaserow is an open-source no-code database and spreadsheet (tables, views, API). This stack runs Baserow with embedded SQLite; for production or heavy use you can switch to Postgres (see Baserow Docker docs). No host ports; put it behind Caddy.
What to knowBazarr is a subtitle manager and downloader for Sonarr and Radarr. It automatically searches for subtitles in your preferred languages and keeps them up to date for your TV and movie library.
What to knowLightweight server monitoring with Docker/Podman stats, historical metrics, and alerts. The hub is the web UI and API; agents run on each host you want to monitor (Beszel, GitHub).
What to knowOSINT tool to search for accounts by homelab-user or email across many sites (Sherlock-like, with extended coverage and report export). Supports PDF/CSV reports and optional AI-based profiling.
What to knowPrometheus Blackbox Exporter for probing endpoints over HTTP, TCP, and other protocols. Use it with Prometheus and Alertmanager to create synthetic checks (e.g. "can I reach my tunnel hostname from inside the homelab?").
What to knowBookStack is a simple, self-hosted wiki for storing documentation in books, chapters, and pages. This stack runs BookStack with MariaDB behind Caddy. No host ports; access via Caddy.
What to knowReverse proxy with automatic HTTPS. Proxies to services on the host via host.docker.internal. Supports local DNS (e.g. AdGuard Home) and public access (Cloudflare Tunnel or port forwarding).
What to knowContainer resource metrics (CPU, memory, network, filesystem) for all containers on the host. Prometheus scrapes cAdvisor; Grafana displays the data (e.g. dashboard 893).
What to knowSelf-hosted open-source scheduling platform. Lets users share booking links, configure availability, and manage appointments without relying on Calendly or similar SaaS tools. Backed by PostgreSQL and Redis.
What to knowWeb UI for an existing Calibre library: browse, read, and download eBooks. Uses your Calibre database (metadata.db) and book files. Supports OPDS, optional ebook conversion (Docker mod), and Google OAuth.
What to knowAnti-detection browser server for AI agents. Wraps Camoufox (a Firefox fork with C++-level fingerprint spoofing) in a REST API. Accessibility snapshots, stable element refs, session isolation, proxy support.
What to knowStealth Chromium for browser automation. Anti-fingerprinting patches compiled directly into Chromium source, not fragile JS shims. Exposes a CDP endpoint that Playwright connects to via connectovercdp().
What to knowExposes services on your Docker host via Cloudflare, no port forwarding or dynamic IP. Traffic goes outbound from host → Cloudflare → your services.
What to knowLinuxServer image lscr.io/linuxserver/code-server. No host config directory is required: settings and extensions persist in the Docker volume codeserverconfig mounted at /config.
What to knowSelf-hosted online file converter supporting 1000+ formats: documents (LibreOffice, Pandoc), images (ImageMagick, Vips, HEIF, JPEG XL), video (FFmpeg), e-books (Calibre), 3D (Assimp), and more. Written with TypeScript, Bun and Elysia.
What to knowCowrie is a medium-to-high interaction SSH and Telnet honeypot that logs brute-force attacks and shell interaction.
What to knowCrowdSec is a collaborative, open-source intrusion prevention system. It analyzes logs from your services, detects aggressive IPs and known attack patterns, and uses curated blocklists and community telemetry to help you block malicious traffic before it reaches your apps.
What to knowEnd-to-end encrypted collaborative office tools (docs, sheets, kanban, forms, drive) behind Caddy.
What to knowSelf-hosted CUPS print server with a web admin UI, IPP sharing, and common Debian printer drivers. Suitable as a homelab "cloud print" hub: add printers in the UI, then point clients at ipp://… or install the queue via your OS print settings.
What to knowDatabasus is a lightweight self-hosted database management UI for browsing and querying SQL databases via a web interface.
What to knowDbGate is an open-source database manager supporting MySQL, PostgreSQL, SQLite, MongoDB, and more via a web or desktop UI.
What to knowLightweight DDNS client that keeps A and AAAA records updated across many DNS providers. Includes a small web UI on port 8000, optional Shoutrrr notifications, and a built-in Docker healthcheck (DNS verification of your records).
What to knowSoftware Composition Analysis (SCA) platform: upload SBOMs (CycloneDX, SPDX), track components, and get vulnerability alerts from NVD, OSS Index, GitHub Advisories, and more. Dependency-Track provides a web UI and REST API, no host ports; access via Caddy.
What to knowDionaea and ConPot are multi-protocol malware and industrial-control honeypots that capture exploits, payloads, and ICS/SCADA probe traffic.
What to knowDispatcharr is a self-hosted stream routing and EPG management tool for organizing IPTV channels and playlist sources.
What to knowDocker image update notifier. Watches your running containers' images and sends a notification when new tags are available (e.g. Telegram, Discord, webhook). Complements Watchtower: you see what changed before or after Watchtower pulls. No web UI; no Caddy reverse proxy needed.
What to knowPost-mortem analysis of Docker runtime environments from forensic copies of a Docker host's disk. Docker Forensics Toolkit can mount host disk images, list containers/images, show configs and logs, mount container filesystems, and extract metadata for timeline analysis (e.g. with Sleuth Kit's mactime).
What to knowGarbage collector for Docker containers and images. Runs a one-shot cleanup against the Docker daemon on the host using the Docker socket.
What to knowDocuSeal is an open-source platform for building PDF forms, collecting signatures, and sending signing links. This stack runs the official DocuSeal image with PostgreSQL behind Caddy (no published ports on the host).
What to knowReal-time Docker container log viewer. It uses a scoped Docker API proxy to list containers and stream logs without mounting the Docker socket into the UI.
What to knowMedia server for movies, TV shows, and music. Emby serves your library to web, mobile, and TV apps and supports hardware-accelerated transcoding.
What to knowMinimal web app for sharing end-to-end encrypted notes and files: the server only stores ciphertext (similar idea to PrivateBin / Bitwarden Send).
What to knowErsatzTV is a self-hosted virtual cable TV server that creates linear TV channels from your media library.
What to knowExplo is a scheduled discovery worker for self-hosted music systems. It fetches personalized recommendations (ListenBrainz) and requests tracks from YouTube and/or Soulseek into your library.
What to knowWeb scraping and crawling API that converts any website into LLM-ready markdown or structured data.
What to knowFirefly III is a self-hosted personal finance manager for tracking accounts, transactions, budgets, and reports.
What to knowProxy server that solves Cloudflare and DDoS-GUARD browser challenges and returns HTML, cookies, and user-agent for use with other HTTP clients (for example arr indexers or Jackett).
What to knowFlood provides a web interface for the bundled rTorrent service. Both services share the torrentsmanual download volume and rTorrent socket volume. rTorrent is built from Alpine's maintained package rather than the abandoned jesec/rtorrent image.
What to knowSelf-hosted RSS feed aggregator: subscribe to feeds, categories, star articles, and use extensions. Feedly-like experience with no account limits.
What to knowOSINT framework for investigating Google accounts and assets: emails, Gaia IDs, Drive files, BSSIDs, and Digital Asset Links. Provides CLI modules with JSON export and requires a one-time login using the GHunt Companion browser extension.
What to knowGitea is a lightweight, self-hosted Git service with a web UI, issue tracking, and basic CI integrations.
What to knowGitLab is a self-hosted DevSecOps platform providing Git repositories, CI/CD pipelines, issue tracking, and a container registry.
What to knowGitLab Runners are CI/CD job execution agents that connect to a GitLab instance and run pipeline jobs in isolated containers.
What to knowGlance is a lightweight dashboard for RSS, weather, markets, Docker status, custom widgets, and more. Configuration is YAML (config/glance.yml). This stack runs Glance behind Caddy on the shared ingress-public network; there are no host port bindings.
What to knowOutbound VPN client so specific containers can use a commercial VPN without putting the whole host behind it. Other stacks attach with networkmode: service:gluetun (e.g. the qbittorrent stack uses its own Gluetun instance; this stack is for a shared or alternate VPN client).
What to knowGotenberg is a stateless API microservice for converting HTML, Markdown, Office documents, and URLs to PDF using headless Chrome and LibreOffice.
What to knowDashboard and visualization for Prometheus (and other datasources). Use with the Prometheus and cAdvisor stacks for host and container metrics.
What to knowGrafana Alloy collects Docker container logs and ships them to Loki, and exposes self-observability metrics for Prometheus to scrape.
What to knowBrowser-based gateway for RDP, VNC, and SSH connections. Guacamole provides one web interface for configured desktops and servers without a local remote-desktop client.
What to knowHandBrake is an open-source video transcoder that converts video files between formats and compresses media.
What to knowHarbor is a cloud-native container registry providing policies, RBAC, replication, scanning, and a web UI. Harbor is normally installed using its own installer, which generates a dedicated docker-compose.yml and harbor.yml config.
What to knowHashcat is a password recovery utility with GPU acceleration and support for hundreds of hash types.
What to knowSelf-hosted implementation of the Tailscale control server. Lets you run your own Tailscale-style mesh VPN and use Tailscale clients (or headscale-specific options) to connect.
What to knowHedgeDoc is a collaborative markdown editor for real-time note taking and documentation, similar to HackMD. This stack runs HedgeDoc with Postgres behind Caddy.
What to knowHolehe checks if an email address is registered on many websites using their "forgot password" flows, without sending emails to the target. This stack wraps the holehe-web FastAPI app to provide a simple web UI and CSV export.
What to knowHomarr is a dashboard for your homelab: add links to your services, widgets (Docker, Uptime Kuma, etc.), and optional integrations. This stack runs Homarr behind Caddy. No host ports; access via Caddy.
What to knowHome automation hub for integrating lights, sensors, switches, and other devices. This stack runs Home Assistant in Docker with persistent config and exposes the web UI via Caddy.
What to knowStatic landing page (e.g. "under construction") for your root domain or a dedicated hostname. One nginx container serves files from ./www; no database or app logic. Replace the default www/index.html with your own content when you are ready.
What to knowSelf-hosted photo and video backup: upload from phones and the web, face detection, search, and albums.
What to knowSelf-hosted secrets manager for API keys, environment variables, and config. Sync secrets to apps, CI/CD, and CLI. Open-source alternative to Doppler, Vault (simpler), and env vaults.
What to knowInfluxDB is an open-source time-series database optimized for storing metrics, events, and analytics data.
What to knowBrowser-based utilities for developers and administrators, including text, encoding, hash, JSON, color, and QR-code tools.
What to knowOpen-source media server for movies, TV shows, and music. Jellyfin serves your media library to web, mobile, and TV apps with no proprietary cloud dependency.
What to knowJellystat is a free, open-source statistics app for Jellyfin (session monitoring, libraries, watch history, and related metrics). This stack runs the official Docker image with a dedicated PostgreSQL instance.
What to knowJoplin Server is the official synchronization backend for Joplin note-taking clients. This stack runs Joplin Server with Postgres behind Caddy.
What to knowKali Linux is a Debian-based distribution packed with offensive security and penetration testing tools.
What to knowContainer streaming platform for browser-based access to desktops and applications. Delivers on-demand, disposable Docker containers (Remote Browser Isolation, DaaS, secure remote access) streamed to the web, no client software or VPN required. Powered by KasmVNC.
What to knowComics, manga, and eBook server with a built-in web reader, OPDS support, and reading progress. Single app for mixed libraries (CBZ, CBR, EPUB, etc.). Can run alongside Komga and Calibre-Web or replace one of them depending on preference.
What to knowKeycloak is an open-source identity and access management solution. It provides SSO, identity brokering, and user management, and can act as an OpenID Connect / OAuth 2.0 / SAML IdP for your other stacks (e.g. Outline, Grafana, Immich, Linkwarden).
What to knowOpen https://kokoro-tts.home/web (or your internal hostname) to try voices. API base on Docker: http://kokoro-tts:8880/v1 with a dummy API key (e.g. not-needed). Add your own public site in Caddy only if you intentionally expose TTS on the Internet.
What to knowKometa (formerly Plex Meta Manager) is a tool that automatically manages Plex library metadata, overlays, and collections.
What to knowSelf-hosted comics and manga server: organize, browse, and read CBZ, CBR, PDF, and EPUB in the browser. OPDS support for apps like Tachiyomi; multi-user with reading progress and library-level permissions.
What to knowTag-based comic and manga archive manager. Upload or drop CBR, CBZ, PDF, and other archives; organize with namespaced tags and plugins for metadata. Good for large, tag-heavy libraries (e.g. doujinshi, manga). Reads from archives without extracting.
What to knowSelf-hosted chat interface for multiple AI providers, agents, MCP tools, code execution, search, and image generation.
What to knowMusic collection manager for Usenet and torrents. Lidarr tracks artists and albums, grabs them from NZB/torrent indexers, and keeps your library organized.
What to knowLinkding is a simple, self-hosted bookmark manager with tags, full-text search, and import (Netscape bookmarks, etc.). This stack runs Linkding behind Caddy. No host ports; access via Caddy.
What to knowSelf-hosted link-in-bio page (Linktree-style): one URL that shows your profile and a list of links (social, projects, etc.). Customizable themes, optional multi-user, no database required, data lives in the container volume.
What to knowSelf-hosted bookmark manager and link aggregator: save links, archive pages, organize with collections, full-text search.
What to knowOpenAI-compatible LLM proxy for Ollama, OpenAI, Anthropic, Azure, and many other providers.
What to knowThis stack is a thin wrapper around the community logseq-sync backend implementation. It is experimental and not an official Logseq product. Integration with the Logseq clients may require code modifications or custom builds; see the upstream repository for current status and instructions.
What to knowLoki is a log aggregation system from Grafana, optimized for storing and querying logs with Prometheus-style labels. This stack runs a single-node Loki instance. Deploy Promtail (stacks/promtail) separately to ship host and container logs to Loki.
What to knowOSINT tool: collect a dossier on a person by homelab-user only, checking thousands of sites and gathering available info from profile pages. No API keys. Fork of Sherlock with profile parsing, recursive search, and report export (HTML, PDF, XMind).
What to knowLocal SMTP catcher for development and testing. Receives all mail on port 1025 and displays it in a web UI (port 8025). No external delivery, ideal for internal-only mailing when combined with the Postfix relay.
What to knowMaloja is a self-hosted music scrobble server that tracks your listening history and provides statistics.
What to knowMatomo is a self-hosted, privacy-respecting web analytics platform that gives you full ownership of your data.
What to knowSelf-hosted team chat and collaboration with PostgreSQL backend, proxied by Caddy.
What to knowSelf-hosted recipe manager and meal planner: import recipes from URLs, plan meals, generate shopping lists, and organize cookbooks.
What to knowMeilisearch is a fast, typo-tolerant search engine with an HTTP API. Use it as a search backend for your apps or custom UIs. This stack runs Meilisearch behind Caddy. No host ports; access via Caddy.
What to knowOSINT tool for extracting metadata from publicly available documents (PDF, DOC, XLS, PPT, etc.) discovered via Google. Downloads files for a given domain and can reveal homelab-users, software versions, paths, and other metadata. No upstream Docker image; built from source.
What to knowSelf-hosted web GUI for yt-dlp/youtube-dl with playlist support and a download queue. Lets you send video URLs from your browser and download them as video or audio to your homelab storage.
What to knowMinIO is a high-performance, S3-compatible object store. Use it as a backend for backups (e.g. the restic stack), application uploads, logs, and other large objects.
What to knowLightweight MQTT broker for Home Assistant, Zigbee2MQTT, Node-RED, and other IoT/automation clients.
What to knowAutomated comic book downloader (CBR/CBZ) for Usenet and torrents. Tracks series, fetches new issues via NZBGet or qBittorrent, and organizes them into /data/comics.
What to knowWorkflow automation: connect apps, APIs, and services with a visual editor. Self-hosted alternative to Zapier/Make. Uses SQLite by default (data in Docker volume); optional Postgres for scaling.
What to knowSend personal data deletion request emails to hundreds of data brokers at once. Free, open-source Rails app: you compose your request, pick which companies to contact, and Naisho sends the emails via SMTP.
What to knowSelf-hosted music server that indexes a local library and streams through its web interface or Subsonic-compatible mobile and desktop clients.
What to knowSelf-hosted NetBird control plane: WireGuard-based mesh VPN with a web dashboard, embedded identity (Dex), and combined management/signal/relay in one server image (NetBird Docs).
What to knownetboot.xyz is a network boot utility that lets you PXE-boot into dozens of OS installers and live environments from a single menu.
What to knowNetBox is an IPAM (IP address management) and DCIM (data center infrastructure management) tool for documenting networks, devices, racks, and circuits. The recommended Docker deployment is maintained in the netbox-docker project.
What to knowNetExec (formerly CrackMapExec) is a network pentesting framework for enumerating and attacking Active Directory and network services.
What to knowNextcloud is a self-hosted file sync and sharing platform with support for calendar, contacts, tasks, and many apps. This stack runs Nextcloud behind Caddy with Postgres and Redis.
What to knowPrometheus Node Exporter for host-level metrics (CPU, memory, disk, network). Use with Prometheus and Grafana (e.g. dashboard 1860 – Node Exporter Full).
What to knowNode-RED is a flow-based, low-code programming tool for wiring together hardware devices, APIs, and online services. It lets you build automations as drag‑and‑drop flows that react to events, timers, webhooks, MQTT messages, and more.
What to knowSpatial, AI-augmented thinking canvas (nodepad), notes on a canvas with automatic classification and connections. API keys are stored only in the browser (per upstream); the container just serves the Next.js UI.
What to knowntfy is a simple HTTP-based pub-sub notification service. Send push notifications via PUT/POST; use the Android/iOS app or curl to subscribe. This stack runs ntfy behind Caddy. No host ports; access via Caddy.
What to knowNetwork traffic analytics and flow monitoring. This stack runs ntopng with host networking so it can observe traffic on the Docker host's interfaces.
What to knowSelf-hosted NUT server (upsd) for exposing UPS status to LAN clients and monitoring tools.
What to knowHigh-performance Usenet downloader. NZBGet handles NZB downloads from Usenet providers and integrates with automation tools like Sonarr, Radarr, Lidarr, and Prowlarr.
What to knowMeta search for Usenet indexers. NZBHydra 2 aggregates results from multiple NZB indexers, normalizes them, and exposes a Newznab-compatible API for apps like Sonarr, Radarr, Lidarr, and Prowlarr.
What to knowSelf-hosted file server with user authentication, upload/download, search, previews (text, images, audio, video, PDF), media playlists, and shareable external links. Stack: Svelte frontend, Rust (Rocket) backend.
What to knowSelf-hosted Ollama instance with GPU support for running local LLMs.
What to knowOmbi is a self-hosted media request and user management tool for Plex, Jellyfin, and Emby.
What to knowTor Onion Services monitoring: continuously probes a set of onion endpoints, exports metrics to Prometheus, and provides Grafana dashboards and Alertmanager alerts. Uses the official Tor Project Onionprobe stack with service names prefixed so it does not clash with your existing Prometheus/Grafana.
What to knowCLI tool for investigating Tor hidden services (onion sites). Scans for operational security issues and misconfigurations (e.g. modstatus, directory listings, EXIF, server fingerprinting). Useful for hidden-service operators and researchers.
What to knowAn open source, privacy-focused alternative to Google's Notebook LM with support for multiple AI providers.
What to knowSelf-hosted chat interface for Ollama and OpenAI-compatible APIs. It can run without an internet connection when configured with local providers.
What to knowOpenGist is a self-hosted Gist service backed by Git, providing paste/snippet sharing with syntax highlighting.
What to knowOpenSpeedTest is a self-hosted HTML5 network speed test tool that runs entirely in the browser.
What to knowOutline is a collaborative knowledge base. This stack runs Outline with Postgres, Redis, S3-compatible storage such as MinIO, and Caddy. Authentication uses an external identity provider such as Keycloak or Authentik.
What to knowAI-assisted classification and OCR rescue workflows for paperless-ngx.
What to knowLLM and OCR augmentation service for paperless-ngx.
What to knowDocument management: scan, OCR, and search your paperwork.
What to knowSecure password and secret sharing: create shareable links with view limits and expiration. Recipients see the secret once (or a set number of times), then the link expires. Optional passphrase for extra protection.
What to knowPeaNUT is a self-hosted web dashboard for monitoring UPS devices via Network UPS Tools (NUT).
What to knowPrivacy-focused AI-powered answering engine that combines web search with AI models for cited answers. Perplexica uses ingress-public for Caddy and ai-backend for shared AI/search backends.
What to knowpgAdmin 4 is the leading open-source web-based administration and development platform for PostgreSQL.
What to knowPhone number OSINT tool: looks up basic information about a phone number (country, carrier, line type, VOIP or mobile) and searches for web footprints using multiple search engines and sources. Exposes a web UI and REST API.
What to knowMusicBrainz Picard is an advanced music tagger and organizer. This stack provides a browser-accessible Picard UI and mounts both your main library and a staging import directory so you can review, tag, and move files into your canonical music tree.
What to knowThis stack runs Pi-hole for network-wide ad blocking and DNS filtering in Docker.
What to knowDigital forensics timeline tool. Plaso (log2timeline) extracts timestamps from disk images, directories, and evidence files into a single timeline; psort writes that to CSV, JSON, or other formats. Use for incident response, artifact analysis, and timeline reconstruction.
What to knowSelf-hosted media server for movies, TV shows, and music. Plex serves your media library to web, mobile, TV apps, and other clients.
What to knowPocketBase is an open-source backend-as-a-service with a built-in SQLite database, auth, and admin UI.
What to knowCentral SMTP relay ("null client") for your Docker stacks, based on boky/postfix. Apps send mail to this container; it then relays via your real mail provider (SES, Mailgun, SMTP relay from your ISP, etc.).
What to knowPostHog is product analytics, session replay, feature flags, and experimentation. The hobby deployment is PostHog's supported Docker Compose layout (Postgres, ClickHouse, Kafka, Temporal, MinIO, SeaweedFS, workers, and an internal Caddy proxy service that routes traffic to web, capture, livestream, etc.).
What to knowPostiz is an open-source social media scheduling and management platform supporting multiple networks.
What to knowMicrosoft Presidio is a data protection and PII detection/anonymization API for text and images.
What to knowEncrypted pastebin: share text snippets with optional expiration and password. No account required; pastes are encrypted in the browser before upload.
What to knowCLI tool to automate opting out of data brokers. Uses Playwright to fill opt-out forms so you don't have to do it by hand. Tracks which brokers you've already opted out from via profiles. No upstream Docker image; built from source.
What to knowMetrics collection and storage. Scrapes cAdvisor (container metrics), optional Watchtower /v1/metrics, and itself. Grafana uses Prometheus as a datasource for dashboards.
What to knowPromtail is the log-shipping agent for Loki. It tails log files on the host and pushes them to a Loki instance. Deploy this stack after the Loki stack so logs are available in Grafana (Explore → Loki).
What to knowIndexer manager and proxy for Usenet and torrents. Prowlarr manages indexers centrally and syncs them to Sonarr, Radarr, Lidarr, Readarr, and other arr apps.
What to knowpwntools + GDB/pwndbg is a containerized CTF and exploit-development environment with Python pwntools and a patched GDB.
What to knowTorrent client with all traffic routed through a VPN (Gluetun). Intended for automated downloads from the arr apps. The media tree is mounted once at /data, allowing hardlinked imports that preserve seeding without duplicating file data.
What to knowRackula is a static site generator that turns a Rack-compatible Ruby app into a static website.
What to knowMovie collection manager for Usenet and torrents. Radarr monitors your wanted movies, grabs releases from NZB/torrent indexers, sends them to download clients, and organizes the resulting files.
What to knowBookshelf is a Readarr revival for managing ebook or audiobook collections with Usenet and torrents. This stack uses its Hardcover-backed image for higher-quality metadata.
What to knowAutomated recon framework that orchestrates many tools (subdomain enumeration, port scanning, screenshots, Nuclei, directory fuzzing, OSINT, etc.) into a single workflow. Designed for offensive recon and bug bounty style asset discovery.
What to knowResilio Sync (formerly BitTorrent Sync) is a peer-to-peer file synchronization tool for homelab and private file sharing.
What to knowResponder and mitm6 are network penetration testing tools for LLMNR/NBT-NS/WPAD poisoning and IPv6 MitM attacks.
What to knowAutomated backups using restic running on a schedule, typically targeting an S3-compatible object store such as the minio stack in this repo.
What to knowSelf-hosted ROM manager: scan, enrich with metadata, browse, and play games in the browser via EmulatorJS. Supports 400+ platforms, multi-disk games, mods, and optional metadata from IGDB, Screenscraper, MobyGames, SteamGridDB, and RetroAchievements.
What to knowStandalone rTorrent service for manual torrent downloads. It stores session state in rtorrentdata and downloads in the shared external torrentsmanual volume.
What to knowManual torrent stack for hand‑curated torrents from private trackers. Uses the LinuxServer.io rtorrent-flood image, which bundles the rTorrent daemon with the Flood web UI.
What to knowSelf-hosted ID / rendezvous (hbbs) and relay (hbbr) for RustDesk remote desktop. Traffic stays on infrastructure you control; clients use your public hostname or IP with the ports below.
What to knowRustFS is a high-performance, S3-compatible object storage server written in Rust.
What to knowLinuxServer.io ruTorrent deployment with persistent configuration and the shared torrentsmanual download volume.
What to knowScrutiny provides a web UI and alerting for disk SMART metrics. It helps you monitor drive health and catch failing disks early.
What to knowScrypted is a home automation and camera management platform with AI-powered plugins for smart home integration.
What to knowSeafile is a self-hosted file sync and sharing platform with desktop and mobile clients. This stack runs Seafile with MariaDB and Memcached behind Caddy.
What to knowPrivacy-respecting metasearch engine. Aggregates results from multiple search engines.
What to knowSeerr is an open-source media discovery and request manager. It works with Jellyfin, Plex, or Emby, and forwards approved requests to Radarr and Sonarr.
What to knowSelf-hosted URL shortener: short links, redirects, REST API, visit analytics, and optional geolocation. Use the web UI at app.shlink.io (add your server URL and API key) or self-host the web client. Separate from YOURLS (which lives at urls.yourdomain.com in this repo); Shlink is at short.yourdomain.com.
What to knowEmail alias service: create unlimited aliases (e.g. shop@yourdomain.com) that forward to your real inbox. Reply anonymously, block spam per alias, integrate with Bitwarden/1Password. Self-hosted fork of the Proton-owned SimpleLogin app.
What to knowSelf-hosted image sharing platform: upload images (PNG, JPG, WEBP, SVG, AVIF, HEIC, etc.), create collections, share links, ShareX integration, optional guest uploads. Built with Symfony and SvelteKit.
What to knowIT asset management (hardware, software licenses, accessories, consumables). This stack runs Snipe-IT with a MariaDB backend and exposes the web UI via Caddy.
What to knowSnowflake is a Tor pluggable transport proxy that helps censored users reach the Tor network via WebRTC.
What to knowOSINT framework for homelab-user discovery across 500+ platforms, breach lookups (Have I Been Pwned, BreachVIP, Snusbase, LeakCheck), face matching, reverse image search, and optional AI demasking. Includes a web dashboard and CLI.
What to knowTV series management for Usenet and torrents. Sonarr monitors your library, grabs new episodes from NZB/torrent indexers, sends them to your download clients, and organizes the resulting files.
What to knowSelf-hosted Soulseek client stack using slskd: web UI, API, and background Soulseek connectivity in one container.
What to knowAutomated OSINT tool with 180+ modules for domains, IPs, emails, BTC addresses, homelab-users and more. Aggregates data from many sources (DNS, breaches, Shodan, GreyNoise, cloud buckets, social media, etc.) into a single web UI.
What to knowStirling-PDF is a web-based PDF toolkit: merge, split, rotate, watermark, OCR, convert to/from images, and more. This stack runs Stirling-PDF behind Caddy. No host ports; access via Caddy.
What to knowSelf-hosted, user-first chat platform (channels, DMs, threads, media, voice) compatible with the official Stoat clients. This stack embeds the upstream stoatchat/self-hosted services but does not expose any host ports – all access goes through the main caddy reverse proxy in this homelab.
What to knowSubdomain enumeration tool that discovers subdomains for a given domain using multiple search engines and techniques. Often used as a first step in recon workflows.
What to knowSelf-hosted productivity app (tasks, timeboxing, focus, and planning UI) served as a web app behind Caddy.
What to knowSyncthing is a continuous file synchronization tool that keeps folders in sync across devices without a central server.
What to knowtailscale-exporter is a Prometheus exporter that exposes Headscale node and network metrics.
What to knowTautulli is a monitoring and statistics tracker for Plex Media Server.
What to knowTerminus is the self-hosted API and web backend for TRMNL e-paper devices. This stack runs the official image with PostgreSQL, Valkey (Redis-compatible), and a Sidekiq worker, matching the upstream compose.yml layout adapted for Caddy (no published host ports on the app or data stores).
What to knowClassic OSINT tool to collect emails, subdomains, hosts, open ports, and banners from multiple public sources (search engines, PGP servers, Shodan, etc.). This stack runs the REST API variant (restfulharvest) so you can query theHarvester over HTTP from other tools and scripts.
What to knowThe Lounge is a self-hosted, always-on IRC web client with persistent connection and multi-user support.
What to knowThreat modeling tool: create diagrams, document threats (STRIDE, etc.), and optionally save models to GitHub, Bitbucket, or GitLab. OWASP Threat Dragon runs as a web app, no host ports; access via Caddy.
What to knowApache Tika is a content detection and extraction toolkit that parses text and metadata from hundreds of file types.
What to knowDark Web OSINT tool: crawl .onion sites, extract links and emails, check if links are live, save results as JSON or tree. OWASP TorBot project; upstream DedSecInside/TorBot. The stack defaults to the repository's GHCR build; set TORBOTIMAGE to use the Harbor mirror or another registry.
What to knowTriliumNext Notes is a self-hosted hierarchical note-taking application with rich text, code blocks, and relation maps.
What to knowThis stack runs TwitchDropsMiner using Docker Compose.
What to knowUmami is a self-hosted, privacy-focused web analytics dashboard. You add websites in the UI, embed a small script.js on pages you want to measure, and view traffic in Umami.
What to knowUnbound is a validating, recursive, caching DNS resolver for private DNS resolution in your homelab.
What to knowSelf-hosted uptime monitoring and status page. Monitors HTTP(s), TCP, ping, and more; supports many notification channels (Telegram, email, Discord, etc.).
What to knowLightweight, self-hosted password manager compatible with Bitwarden clients (browser extensions, mobile apps, CLI).
What to knowVector is a log collection and routing agent. This stack ships host and container logs to the existing Loki stack for centralized search and dashboards in Grafana. It is an alternative to Grafana Alloy; do not enable both Docker collectors at the same time or Loki will receive duplicate container logs.
What to knowVikunja is a self-hosted task and project manager (lists, kanban, Gantt, CalDAV). This stack runs Vikunja with SQLite behind Caddy. No host ports; access via Caddy.
What to knowAutomatically updates running containers when new images are available. Uses the Docker socket on the host.
What to knowWeb-Check collects DNS, TLS, hosting, performance, and security information for a supplied website.
What to knowAdult movie collection manager for Usenet and torrents (Servarr family). Monitors indexers, sends grabs to download clients, and organizes files, same workflow as Radarr, separate library and metadata.
What to knowFor faster inference, switch the image to onerahmet/openai-whisper-asr-webservice:latest-gpu, set ASRDEVICE=cuda, install the NVIDIA Container Toolkit, and add the same deploy.resources.reservations.devices NVIDIA block used in stacks/ollama/docker-compose.yml.
What to knowRemote access VPN server so you can connect laptops and phones into your homelab over WireGuard. This stack runs the LinuxServer.io WireGuard image and exposes UDP 51820 on the host. No HTTP UI; peer configs and QR codes are generated under the wireguardconfig volume.
What to knowWoodpecker CI is a lightweight, Docker-native CI/CD system. This stack runs a Woodpecker server and agent with Postgres, designed to integrate with your gitea stack as the Git provider.
What to knowSelf-hosted URL shortener: one app with web UI, API, and redirects. No path routing, Caddy just reverse-proxies the host to the container.
What to knowWeb application and API security scanner. This stack runs ZAP with the Webswing UI and proxy; access it through your browser or via ZAP desktop/scripts pointing at the proxy port via Caddy.
What to knowBridge Zigbee devices to MQTT so they can be used by Home Assistant, Node-RED, and other automation tools.
What to knowNo applications match those filters.