documents/STACK-CATALOG.md

Rama main · réplica de lectura del repositorio original.

# Stack catalog

Generated from every `stacks/<name>/README.md`. Do not edit the table directly; run `python3 scripts/build-stack-catalog.py`.

<!-- STACK_CATALOG_GENERATED_START -->
| Stack | What it does | Runtime flags |
|---|---|---|
| [**acquire**](../stacks/acquire/README.md) | Gather forensic artifacts from disk images or a live system into a single archive. [Acquire](https://docs.dissect.tools/en/stable/projects/acquire/index.html) uses the [Dissect](https://dissect.tools/) framework: it collects modules (paths/globs) by profile (`full`, `default`, `minimal`, `none`) and outputs a lightweight container for triage. Supports VMDK, E01, and other formats via Dissect; optional volatile (memory) collection. | None |
| [**actual-budget**](../stacks/actual-budget/README.md) | [Actual Budget](https://actualbudget.org/) is a local-first, open-source budgeting app with envelope-style budgeting and optional sync. This stack runs the **Actual sync server** so you can use the desktop/mobile app with cloud sync. No host ports; put it behind Caddy. | None |
| [**adguard-home**](../stacks/adguard-home/README.md) | Network-wide DNS-level ad and tracker blocking. Run AdGuard Home on your Docker host as the primary DNS server for your LAN and expose the web UI via Caddy. | None |
| [**affine**](../stacks/affine/README.md) | AFFiNE is a self-hosted collaborative knowledge workspace combining docs, whiteboards, and a knowledge graph in one app. | None |
| [**afl-libfuzzer**](../stacks/afl-libfuzzer/README.md) | Coverage-guided fuzzing toolbox (AFL++ and libFuzzer) for discovering crashes and vulnerabilities in binaries and libraries. | None |
| [**ail-framework**](../stacks/ail-framework/README.md) | The locally built AIL 7 image includes a dark interface theme. The final build stage appends `ail-dark-mode.css` to AIL's shared Bootstrap stylesheet so the theme covers the login, settings, dashboard, table, form, and modal templates without maintaining forks of upstream HTML. It also appends `ail-dark-mode.js` to ECharts so canvas-rendered charts use the bundled dark theme. | None |
| [**alertmanager**](../stacks/alertmanager/README.md) | Prometheus Alertmanager for routing alerts (email, webhooks, chat, etc.) based on labels. Use it together with the Prometheus stack in this repo to turn metrics into actionable notifications. | None |
| [**anything-llm**](../stacks/anything-llm/README.md) | AnythingLLM is a **RAG workspace** for uploading documents, building vector workspaces, and chatting with **Ollama** or other model providers. The default vector database is **LanceDB**. | None |
| [**appflowy**](../stacks/appflowy/README.md) | AppFlowy self-hosting stack scaffold for Caddy/Portainer deployment. | None |
| [**archisteamfarm**](../stacks/archisteamfarm/README.md) | Steam card idling and automation. ASF runs in the background, optionally exposing a web IPC (API + ASF-ui) for management. Access via Caddy at **https://asf.yourdomain.com** (or your configured hostname). | None |
| [**archivebox**](../stacks/archivebox/README.md) | Self-hosted web archive: save full copies of web pages (HTML, screenshots, PDFs, and WARCs) from URLs, bookmarks, and feeds. | None |
| [**asking**](../stacks/asking/README.md) | Lightweight self-hosted strawpoll-style polling app with a Next.js frontend and Node.js API backed by PostgreSQL. | None |
| [**atomic-red-team**](../stacks/atomic-red-team/README.md) | Atomic Red Team is a library of small, portable adversary-simulation tests mapped to MITRE ATT&CK techniques. | None |
| [**audiobookshelf**](../stacks/audiobookshelf/README.md) | Self-hosted podcast (and audiobook) server: subscribe to podcasts, stream or download episodes, sync progress across web and mobile apps. | None |
| [**auth-fuzz**](../stacks/auth-fuzz/README.md) | HTTP authentication fuzzer for testing login endpoints against wordlists and brute-force attack patterns. | None |
| [**authentik**](../stacks/authentik/README.md) | [authentik](https://goauthentik.io/) is an open-source identity provider and access management platform. It can act as an OIDC/OAuth2/SAML IdP for your other stacks (e.g. Outline, Grafana, Immich, Linkwarden) and integrates well with reverse proxies and Kubernetes/containers. | Docker socket: worker |
| [**auto-identity-remove**](../stacks/auto-identity-remove/README.md) | Local LLM-powered PII redaction service. Accepts document uploads and returns redacted PDFs with personal information blacked out. Runs entirely on-prem, no data leaves the host. | floating image: auto-identity-remove |
| [**backrest**](../stacks/backrest/README.md) | Authenticated Restic snapshot browser and restore UI, with the existing repository mounted read-only and no competing scheduler. | None |
| [**baserow**](../stacks/baserow/README.md) | [Baserow](https://baserow.io/) is an open-source no-code database and spreadsheet (tables, views, API). This all-in-one image runs embedded PostgreSQL and Redis; for production or heavy use you can separate those services (see [Baserow Docker docs](https://baserow.io/docs/installation/install-with-docker-compose)). No host ports; put it behind Caddy. | None |
| [**bazarr**](../stacks/bazarr/README.md) | Bazarr is a subtitle manager and downloader for Sonarr and Radarr. It automatically searches for subtitles in your preferred languages and keeps them up to date for your TV and movie library. | None |
| [**beszel**](../stacks/beszel/README.md) | Lightweight server monitoring with Docker/Podman stats, historical metrics, and alerts. The **hub** is the web UI and API; **agents** run on each host you want to monitor ([Beszel](https://beszel.dev/), [GitHub](https://github.com/henrygd/beszel)). | None |
| [**blackbird**](../stacks/blackbird/README.md) | OSINT tool to search for accounts by homelab-user or email across many sites (Sherlock-like, with extended coverage and report export). Supports PDF/CSV reports and optional AI-based profiling. | None |
| [**blackbox-exporter**](../stacks/blackbox-exporter/README.md) | Prometheus Blackbox Exporter for probing endpoints over HTTP, TCP, and other protocols. Use it with Prometheus and Alertmanager to create synthetic checks (e.g. "can I reach my tunnel hostname from inside the homelab?"). | None |
| [**bookstack**](../stacks/bookstack/README.md) | [BookStack](https://www.bookstackapp.com/) is a simple, self-hosted wiki for storing documentation in books, chapters, and pages. This stack runs BookStack with MariaDB behind Caddy. No host ports; access via Caddy. | None |
| [**caddy**](../stacks/caddy/README.md) | Reverse proxy with automatic HTTPS. Proxies to services on the host via `host.docker.internal`. Supports local DNS (e.g. AdGuard Home) and public access (Cloudflare Tunnel or port forwarding). | None |
| [**cadvisor**](../stacks/cadvisor/README.md) | Container resource metrics (CPU, memory, network, filesystem) for all containers on the host. Prometheus scrapes cAdvisor; Grafana displays the data (e.g. dashboard 893). | privileged: cadvisor |
| [**calcom**](../stacks/calcom/README.md) | Self-hosted open-source scheduling platform. Lets users share booking links, configure availability, and manage appointments without relying on Calendly or similar SaaS tools. Backed by PostgreSQL and Redis. | None |
| [**calibre-web**](../stacks/calibre-web/README.md) | Web UI for an existing Calibre library: browse, read, and download eBooks. Uses your Calibre database (`metadata.db`) and book files. Supports OPDS, optional ebook conversion (Docker mod), and Google OAuth. | None |
| [**camofox-browser**](../stacks/camofox-browser/README.md) | Anti-detection browser server for AI agents. Wraps Camoufox (a Firefox fork with C++-level fingerprint spoofing) in a REST API. Accessibility snapshots, stable element refs, session isolation, proxy support. | None |
| [**changedetection**](../stacks/changedetection/README.md) | Monitor website content, prices, and restocks and send change notifications to Gotify. | None |
| [**clark-browser**](../stacks/clark-browser/README.md) | Stealth Chromium for browser automation. Anti-fingerprinting patches compiled directly into Chromium source, not fragile JS shims. Exposes a CDP endpoint that Playwright connects to via connect_over_cdp(). | None |
| [**cloudflare-tunnel**](../stacks/cloudflare-tunnel/README.md) | Exposes services on your Docker host via Cloudflare, no port forwarding or dynamic IP. Traffic goes outbound from host → Cloudflare → your services. | None |
| [**code-server**](../stacks/code-server/README.md) | LinuxServer image **`lscr.io/linuxserver/code-server`**. No host config directory is required: settings and extensions persist in the Docker volume **`code_server_config`** mounted at **`/config`**. | None |
| [**convertx**](../stacks/convertx/README.md) | Self-hosted online file converter supporting **1000+ formats**: documents (LibreOffice, Pandoc), images (ImageMagick, Vips, HEIF, JPEG XL), video (FFmpeg), e-books (Calibre), 3D (Assimp), and more. Written with TypeScript, Bun and Elysia. | None |
| [**cowrie**](../stacks/cowrie/README.md) | Cowrie is a medium-to-high interaction SSH and Telnet honeypot that logs brute-force attacks and shell interaction. | None |
| [**crowdsec**](../stacks/crowdsec/README.md) | CrowdSec is a collaborative, open-source intrusion prevention system. It analyzes logs from your services, detects aggressive IPs and known attack patterns, and uses curated blocklists and community telemetry to help you block malicious traffic before it reaches your apps. | Docker socket: crowdsec-docker-socket-proxy |
| [**cryptpad**](../stacks/cryptpad/README.md) | End-to-end encrypted collaborative office tools (docs, sheets, kanban, forms, drive) behind Caddy. | None |
| [**cups**](../stacks/cups/README.md) | Self-hosted **CUPS** print server with a web admin UI, **IPP** sharing, and common Debian printer drivers. Suitable as a homelab "cloud print" hub: add printers in the UI, then point clients at `ipp://…` or install the queue via your OS print settings. | None |
| [**databasus**](../stacks/databasus/README.md) | Databasus is a lightweight self-hosted database management UI for browsing and querying SQL databases via a web interface. | None |
| [**dawarich**](../stacks/dawarich/README.md) | Store and explore personal location history, trips, and photo memories. | None |
| [**dbgate**](../stacks/dbgate/README.md) | DbGate is an open-source database manager supporting MySQL, PostgreSQL, SQLite, MongoDB, and more via a web or desktop UI. | None |
| [**ddns-updater**](../stacks/ddns-updater/README.md) | Lightweight DDNS client that keeps **A** and **AAAA** records updated across [many DNS providers](https://github.com/qdm12/ddns-updater/blob/master/README.md). Includes a small **web UI** on port 8000, optional [Shoutrrr](https://github.com/nicholas-fedor/shoutrrr) notifications, and a built-in Docker healthcheck (DNS verification of your records). | None |
| [**dependency-track**](../stacks/dependency-track/README.md) | Software Composition Analysis (SCA) platform: upload SBOMs (CycloneDX, SPDX), track components, and get vulnerability alerts from NVD, OSS Index, GitHub Advisories, and more. [Dependency-Track](https://dependencytrack.org/) provides a web UI and REST API, no host ports; access via Caddy. | None |
| [**dionaea-conpot**](../stacks/dionaea-conpot/README.md) | Dionaea and ConPot are multi-protocol malware and industrial-control honeypots that capture exploits, payloads, and ICS/SCADA probe traffic. | None |
| [**dispatcharr**](../stacks/dispatcharr/README.md) | Dispatcharr is a self-hosted stream routing and EPG management tool for organizing IPTV channels and playlist sources. | None |
| [**diun**](../stacks/diun/README.md) | Docker image update notifier. Watches your running containers' images and sends a notification when new tags are available (e.g. Telegram, Discord, webhook). Complements Watchtower: you see what changed before or after Watchtower pulls. No web UI; no Caddy reverse proxy needed. | Docker socket: diun-docker-socket-proxy |
| [**docker-forensics-toolkit**](../stacks/docker-forensics-toolkit/README.md) | Post-mortem analysis of Docker runtime environments from forensic copies of a Docker host's disk. [Docker Forensics Toolkit](https://github.com/docker-forensics-toolkit/toolkit) can mount host disk images, list containers/images, show configs and logs, mount container filesystems, and extract metadata for timeline analysis (e.g. with Sleuth Kit's `mactime`). | None |
| [**docker-gc**](../stacks/docker-gc/README.md) | Garbage collector for Docker containers and images. Runs a one-shot cleanup against the Docker daemon on the host using the Docker socket. | Docker socket: docker-gc, builder-cache |
| [**docuseal**](../stacks/docuseal/README.md) | [DocuSeal](https://www.docuseal.co/) is an open-source platform for building PDF forms, collecting signatures, and sending signing links. This stack runs the official **DocuSeal** image with **PostgreSQL** behind Caddy (no published ports on the host). | None |
| [**dozzle**](../stacks/dozzle/README.md) | Real-time Docker container log viewer. It uses a scoped Docker API proxy to list containers and stream logs without mounting the Docker socket into the UI. | Docker socket: dozzle-docker-socket-proxy |
| [**emby**](../stacks/emby/README.md) | Media server for movies, TV shows, and music. Emby serves your library to web, mobile, and TV apps and supports hardware-accelerated transcoding. | None |
| [**enclosed**](../stacks/enclosed/README.md) | Minimal web app for sharing **end-to-end encrypted** notes and files: the server only stores ciphertext (similar idea to PrivateBin / Bitwarden Send). | None |
| [**ersatztv**](../stacks/ersatztv/README.md) | ErsatzTV Legacy creates scheduled television channels from an existing media library. It exports M3U playlists and XMLTV schedules for Dispatcharr, Plex, Jellyfin and other IPTV clients. | None |
| [**explo**](../stacks/explo/README.md) | [Explo](https://github.com/LumePart/Explo) is a scheduled discovery worker for self-hosted music systems. It fetches personalized recommendations (ListenBrainz) and requests tracks from YouTube and/or Soulseek into your library. | None |
| [**firecrawl**](../stacks/firecrawl/README.md) | Web scraping and crawling API that converts any website into LLM-ready markdown or structured data. | None |
| [**firefly-iii**](../stacks/firefly-iii/README.md) | [Firefly III](https://www.firefly-iii.org/) is a self-hosted personal finance manager for tracking accounts, transactions, budgets, and reports. | None |
| [**flaresolverr**](../stacks/flaresolverr/README.md) | Proxy server that solves Cloudflare and DDoS-GUARD browser challenges and returns HTML, cookies, and user-agent for use with other HTTP clients (for example *arr indexers or Jackett). | None |
| [**flood**](../stacks/flood/README.md) | Flood provides a web interface for the bundled rTorrent service. Both services share the `torrents_manual` download volume and rTorrent socket volume. rTorrent is built from Alpine's maintained package rather than the abandoned `jesec/rtorrent` image. | None |
| [**freshrss**](../stacks/freshrss/README.md) | Self-hosted RSS feed aggregator: subscribe to feeds, categories, star articles, and use extensions. Feedly-like experience with no account limits. | None |
| [**ghunt**](../stacks/ghunt/README.md) | OSINT framework for investigating Google accounts and assets: emails, Gaia IDs, Drive files, BSSIDs, and Digital Asset Links. Provides CLI modules with JSON export and requires a one-time login using the GHunt Companion browser extension. | None |
| [**gitea**](../stacks/gitea/README.md) | [Gitea](https://about.gitea.com/) is a lightweight, self-hosted Git service with a web UI, issue tracking, and basic CI integrations. | None |
| [**gitlab**](../stacks/gitlab/README.md) | GitLab is a self-hosted DevSecOps platform providing Git repositories, CI/CD pipelines, issue tracking, and a container registry. | None |
| [**gitlab-runners**](../stacks/gitlab-runners/README.md) | GitLab Runners are CI/CD job execution agents that connect to a GitLab instance and run pipeline jobs in isolated containers. | Docker socket: gitlab-runner |
| [**glance**](../stacks/glance/README.md) | [Glance](https://github.com/glanceapp/glance) is a lightweight dashboard for RSS, weather, markets, Docker status, custom widgets, and more. Configuration is YAML (`config/glance.yml`). This stack runs Glance behind Caddy on the shared `ingress-public` network; there are no host port bindings. | None |
| [**gluetun**](../stacks/gluetun/README.md) | Outbound VPN client so **specific containers** can use a commercial VPN without putting the whole host behind it. Other stacks attach with `network_mode: service:gluetun` (e.g. the qbittorrent stack uses its own Gluetun instance; this stack is for a shared or alternate VPN client). | None |
| [**gotenberg**](../stacks/gotenberg/README.md) | Gotenberg is a stateless API microservice for converting HTML, Markdown, Office documents, and URLs to PDF using headless Chrome and LibreOffice. | None |
| [**gotify**](../stacks/gotify/README.md) | Authenticated push notifications with separate applications for monitoring, image updates, and workflow approvals. | None |
| [**grafana**](../stacks/grafana/README.md) | Dashboard and visualization for Prometheus (and other datasources). Use with the Prometheus and cAdvisor stacks for host and container metrics. | None |
| [**grafana-alloy**](../stacks/grafana-alloy/README.md) | Grafana Alloy collects Docker container logs, host files and journald and ships them to Loki, and exposes self-observability metrics for Prometheus to scrape. | Docker socket: alloy-docker-socket-proxy |
| [**guacamole**](../stacks/guacamole/README.md) | Browser-based gateway for **RDP**, **VNC**, and **SSH** connections. Guacamole provides one web interface for configured desktops and servers without a local remote-desktop client. | None |
| [**handbrake**](../stacks/handbrake/README.md) | HandBrake is an open-source video transcoder that converts video files between formats and compresses media. | None |
| [**harbor**](../stacks/harbor/README.md) | [Harbor](https://goharbor.io/) is a cloud-native container registry providing policies, RBAC, replication, scanning, and a web UI. Harbor is normally installed using its own installer, which generates a dedicated `docker-compose.yml` and `harbor.yml` config. | None |
| [**hashcat**](../stacks/hashcat/README.md) | Hashcat is a password recovery utility with GPU acceleration and support for hundreds of hash types. | None |
| [**headscale**](../stacks/headscale/README.md) | Self-hosted implementation of the Tailscale control server. Lets you run your own Tailscale-style mesh VPN and use Tailscale clients (or headscale-specific options) to connect. | None |
| [**hedgedoc**](../stacks/hedgedoc/README.md) | [HedgeDoc](https://hedgedoc.org/) is a collaborative markdown editor for real-time note taking and documentation, similar to HackMD. This stack runs HedgeDoc with Postgres behind Caddy. | None |
| [**holehe**](../stacks/holehe/README.md) | Holehe checks if an email address is registered on many websites using their "forgot password" flows, without sending emails to the target. This stack wraps the **holehe-web** FastAPI app to provide a simple web UI and CSV export. | None |
| [**homarr**](../stacks/homarr/README.md) | [Homarr](https://homarr.dev/) is a dashboard for your homelab: add links to your services, widgets (Docker, Uptime Kuma, etc.), and optional integrations. This stack runs Homarr behind Caddy. No host ports; access via Caddy. | Docker socket: homarr-docker-socket-proxy |
| [**home-assistant**](../stacks/home-assistant/README.md) | Home automation hub for integrating lights, sensors, switches, and other devices. This stack runs Home Assistant in Docker with persistent config and exposes the web UI via Caddy. | None |
| [**homebox**](../stacks/homebox/README.md) | Organize household possessions, locations, and stored equipment. | None |
| [**homepage**](../stacks/homepage/README.md) | Static **landing page** (e.g. "under construction") for your root domain or a dedicated hostname. One nginx container serves files from `./www`; no database or app logic. Replace the default `www/index.html` with your own content when you are ready. | None |
| [**immich**](../stacks/immich/README.md) | Self-hosted photo and video backup: upload from phones and the web, face detection, search, and albums. | None |
| [**infisical**](../stacks/infisical/README.md) | Self-hosted secrets manager for API keys, environment variables, and config. Sync secrets to apps, CI/CD, and CLI. Open-source alternative to Doppler, Vault (simpler), and env vaults. | None |
| [**influxdb**](../stacks/influxdb/README.md) | InfluxDB is an open-source time-series database optimized for storing metrics, events, and analytics data. | None |
| [**it-tools**](../stacks/it-tools/README.md) | Browser-based utilities for developers and administrators, including text, encoding, hash, JSON, color, and QR-code tools. | None |
| [**jellyfin**](../stacks/jellyfin/README.md) | Open-source media server for movies, TV shows, and music. Jellyfin serves your media library to web, mobile, and TV apps with no proprietary cloud dependency. | None |
| [**jellystat**](../stacks/jellystat/README.md) | [Jellystat](https://github.com/CyferShepard/Jellystat) is a free, open-source statistics app for [Jellyfin](https://jellyfin.org/) (session monitoring, libraries, watch history, and related metrics). This stack runs the official [Docker image](https://hub.docker.com/r/cyfershepard/jellystat) with a dedicated PostgreSQL instance. | None |
| [**joplin-server**](../stacks/joplin-server/README.md) | [Joplin Server](https://joplinapp.org/help/server/) is the official synchronization backend for Joplin note-taking clients. This stack runs Joplin Server with Postgres behind Caddy. | None |
| [**kali**](../stacks/kali/README.md) | Kali Linux is a Debian-based distribution packed with offensive security and penetration testing tools. | None |
| [**kasm**](../stacks/kasm/README.md) | Container streaming platform for **browser-based access to desktops and applications**. Delivers on-demand, disposable Docker containers (Remote Browser Isolation, DaaS, secure remote access) streamed to the web, no client software or VPN required. Powered by KasmVNC. | privileged: kasm |
| [**kavita**](../stacks/kavita/README.md) | Comics, manga, and eBook server with a built-in web reader, OPDS support, and reading progress. Single app for mixed libraries (CBZ, CBR, EPUB, etc.). Can run alongside Komga and Calibre-Web or replace one of them depending on preference. | None |
| [**keycloak**](../stacks/keycloak/README.md) | [Keycloak](https://www.keycloak.org/) is an open-source identity and access management solution. It provides SSO, identity brokering, and user management, and can act as an OpenID Connect / OAuth 2.0 / SAML IdP for your other stacks (e.g. Outline, Grafana, Immich, Linkwarden). | None |
| [**kokoro-tts**](../stacks/kokoro-tts/README.md) | Open **https://kokoro-tts.home/web** (or your internal hostname) to try voices. API base on Docker: **`http://kokoro-tts:8880/v1`** with a dummy API key (e.g. `not-needed`). Add your own public `site` in Caddy only if you intentionally expose TTS on the Internet. | None |
| [**kometa**](../stacks/kometa/README.md) | Kometa (formerly Plex Meta Manager) is a tool that automatically manages Plex library metadata, overlays, and collections. | None |
| [**komga**](../stacks/komga/README.md) | Self-hosted comics and manga server: organize, browse, and read CBZ, CBR, PDF, and EPUB in the browser. OPDS support for apps like Tachiyomi; multi-user with reading progress and library-level permissions. | None |
| [**komodo**](../stacks/komodo/README.md) | Controlled Docker and Compose management, with automatic updates disabled during initial onboarding. | Docker socket: komodo-periphery |
| [**lanraragi**](../stacks/lanraragi/README.md) | Tag-based comic and manga archive manager. Upload or drop CBR, CBZ, PDF, and other archives; organize with namespaced tags and plugins for metadata. Good for large, tag-heavy libraries (e.g. doujinshi, manga). Reads from archives without extracting. | None |
| [**librarr**](../stacks/librarr/README.md) | Book, audiobook and manga acquisition with direct downloads, Prowlarr search, and optional qBittorrent downloads. Existing library managers remain independent. | None |
| [**librechat**](../stacks/librechat/README.md) | Self-hosted chat interface for multiple AI providers, agents, MCP tools, code execution, search, and image generation. | None |
| [**lidarr**](../stacks/lidarr/README.md) | Music collection manager for Usenet and torrents. Lidarr tracks artists and albums, grabs them from NZB/torrent indexers, and keeps your library organized. | None |
| [**linkding**](../stacks/linkding/README.md) | [Linkding](https://linkding.link/) is a simple, self-hosted bookmark manager with tags, full-text search, and import (Netscape bookmarks, etc.). This stack runs Linkding behind Caddy. No host ports; access via Caddy. | None |
| [**linkstack**](../stacks/linkstack/README.md) | Self-hosted **link-in-bio** page (Linktree-style): one URL that shows your profile and a list of links (social, projects, etc.). Customizable themes, optional multi-user, no database required, data lives in the container volume. | None |
| [**linkwarden**](../stacks/linkwarden/README.md) | Self-hosted bookmark manager and link aggregator: save links, archive pages, organize with collections, full-text search. | None |
| [**litellm**](../stacks/litellm/README.md) | OpenAI-compatible **LLM proxy** for Ollama, OpenAI, Anthropic, Azure, and [many other providers](https://docs.litellm.ai/docs/providers). | None |
| [**logseq-sync**](../stacks/logseq-sync/README.md) | This stack is a thin wrapper around the community [logseq-sync](https://github.com/bcspragu/logseq-sync) backend implementation. It is **experimental** and not an official Logseq product. Integration with the Logseq clients may require code modifications or custom builds; see the upstream repository for current status and instructions. | None |
| [**loki**](../stacks/loki/README.md) | [Loki](https://grafana.com/oss/loki/) is a log aggregation system from Grafana, optimized for storing and querying logs with Prometheus-style labels. This stack runs a single-node Loki instance. Deploy **Grafana Alloy** (`stacks/grafana-alloy`) separately to ship host and container logs to Loki. | None |
| [**lubelogger**](../stacks/lubelogger/README.md) | Track vehicle maintenance, fuel use, receipts, and reminders. | None |
| [**maigret**](../stacks/maigret/README.md) | OSINT tool: collect a dossier on a person **by homelab-user only**, checking thousands of sites and gathering available info from profile pages. No API keys. Fork of Sherlock with profile parsing, recursive search, and report export (HTML, PDF, XMind). | None |
| [**mailpit**](../stacks/mailpit/README.md) | Local **SMTP catcher** for development and testing. Receives all mail on port 1025 and displays it in a web UI (port 8025). No external delivery, ideal for internal-only mailing when combined with the Postfix relay. | None |
| [**maloja**](../stacks/maloja/README.md) | Maloja is a self-hosted music scrobble server that tracks your listening history and provides statistics. | None |
| [**matomo**](../stacks/matomo/README.md) | Matomo is a self-hosted, privacy-respecting web analytics platform that gives you full ownership of your data. | None |
| [**mattermost**](../stacks/mattermost/README.md) | Self-hosted team chat and collaboration with PostgreSQL backend, proxied by Caddy. | None |
| [**mealie**](../stacks/mealie/README.md) | Self-hosted recipe manager and meal planner: import recipes from URLs, plan meals, generate shopping lists, and organize cookbooks. | None |
| [**meilisearch**](../stacks/meilisearch/README.md) | [Meilisearch](https://www.meilisearch.com/) is a fast, typo-tolerant search engine with an HTTP API. Use it as a search backend for your apps or custom UIs. This stack runs Meilisearch behind Caddy. No host ports; access via Caddy. | None |
| [**metagoofil**](../stacks/metagoofil/README.md) | OSINT tool for extracting metadata from publicly available documents (PDF, DOC, XLS, PPT, etc.) discovered via Google. Downloads files for a given domain and can reveal homelab-users, software versions, paths, and other metadata. No upstream Docker image; built from source. | None |
| [**metube**](../stacks/metube/README.md) | Self-hosted web GUI for `yt-dlp`/`youtube-dl` with playlist support and a download queue. Lets you send video URLs from your browser and download them as video or audio to your homelab storage. | None |
| [**minio**](../stacks/minio/README.md) | [MinIO](https://min.io/) is a high-performance, S3-compatible object store. Use it as a backend for backups (e.g. the `restic` stack), application uploads, logs, and other large objects. | None |
| [**mosquitto**](../stacks/mosquitto/README.md) | Lightweight MQTT broker for Home Assistant, Zigbee2MQTT, Node-RED, and other IoT/automation clients. | None |
| [**music-assistant**](../stacks/music-assistant/README.md) | Combine music sources and stream to supported network speakers. Host networking enables player discovery. | host network: music-assistant |
| [**mylar3**](../stacks/mylar3/README.md) | Automated comic book downloader (CBR/CBZ) for Usenet and torrents. Tracks series, fetches new issues via NZBGet or qBittorrent, and organizes them into `/data/comics`. | None |
| [**n8n**](../stacks/n8n/README.md) | Workflow automation: connect apps, APIs, and services with a visual editor. Self-hosted alternative to Zapier/Make. Uses SQLite by default (data in Docker volume); optional Postgres for scaling. | Docker socket: restart-gateway |
| [**naisho**](../stacks/naisho/README.md) | Send personal data deletion request emails to hundreds of data brokers at once. Free, open-source Rails app: you compose your request, pick which companies to contact, and Naisho sends the emails via SMTP. | None |
| [**navidrome**](../stacks/navidrome/README.md) | Self-hosted music server that indexes a local library and streams through its web interface or Subsonic-compatible mobile and desktop clients. | None |
| [**netbird**](../stacks/netbird/README.md) | Self-hosted [NetBird](https://netbird.io/) control plane: WireGuard-based mesh VPN with a web dashboard, embedded identity (Dex), and combined management/signal/relay in one server image ([NetBird Docs](https://docs.netbird.io/selfhosted/selfhosted-quickstart)). | None |
| [**netboot.xyz**](../stacks/netboot.xyz/README.md) | netboot.xyz is a network boot utility that lets you PXE-boot into dozens of OS installers and live environments from a single menu. | None |
| [**netbox**](../stacks/netbox/README.md) | NetBox is an IPAM (IP address management) and DCIM (data center infrastructure management) tool for documenting networks, devices, racks, and circuits. The recommended Docker deployment is maintained in the **netbox-docker** project. | None |
| [**netexec**](../stacks/netexec/README.md) | NetExec (formerly CrackMapExec) is a network pentesting framework for enumerating and attacking Active Directory and network services. | None |
| [**nextcloud**](../stacks/nextcloud/README.md) | [Nextcloud](https://nextcloud.com/) is a self-hosted file sync and sharing platform with support for calendar, contacts, tasks, and many apps. This stack runs Nextcloud behind Caddy with Postgres and Redis. | None |
| [**node-exporter**](../stacks/node-exporter/README.md) | Prometheus Node Exporter for host-level metrics (CPU, memory, disk, network). Use with Prometheus and Grafana (e.g. dashboard **1860** – Node Exporter Full). | None |
| [**node-red**](../stacks/node-red/README.md) | Node-RED is a **flow-based, low-code programming tool** for wiring together hardware devices, APIs, and online services. It lets you build automations as drag‑and‑drop flows that react to events, timers, webhooks, MQTT messages, and more. | None |
| [**nodepad**](../stacks/nodepad/README.md) | Spatial, AI-augmented thinking canvas ([nodepad](https://github.com/mskayyali/nodepad)), notes on a canvas with automatic classification and connections. Direct-provider API keys stay in browser settings. The optional LiteLLM provider uses a server-held, model-restricted key and requires owner-only access to the entire site. Notes and provider selection remain in browser storage. | None |
| [**ntfy**](../stacks/ntfy/README.md) | Retired notification example, retained for historical access and rollback. Current notification producers use Gotify. | None |
| [**ntopng**](../stacks/ntopng/README.md) | Network traffic analytics and flow monitoring. This stack runs ntopng with host networking so it can observe traffic on the Docker host's interfaces. | host network: ntopng |
| [**nut-server**](../stacks/nut-server/README.md) | Self-hosted NUT server (`upsd`) for exposing UPS status to LAN clients and monitoring tools. | privileged: nut-server |
| [**nzbget**](../stacks/nzbget/README.md) | High-performance Usenet downloader. NZBGet handles NZB downloads from Usenet providers and integrates with automation tools like Sonarr, Radarr, Lidarr, and Prowlarr. | None |
| [**nzbhydra2**](../stacks/nzbhydra2/README.md) | Meta search for Usenet indexers. NZBHydra 2 aggregates results from multiple NZB indexers, normalizes them, and exposes a Newznab-compatible API for apps like Sonarr, Radarr, Lidarr, and Prowlarr. | None |
| [**oasis**](../stacks/oasis/README.md) | Self-hosted **file server** with user authentication, upload/download, search, previews (text, images, audio, video, PDF), media playlists, and shareable external links. Stack: Svelte frontend, Rust (Rocket) backend. | None |
| [**ollama**](../stacks/ollama/README.md) | Self-hosted Ollama instance with GPU support for running local LLMs. | None |
| [**ombi**](../stacks/ombi/README.md) | Ombi is a self-hosted media request and user management tool for Plex, Jellyfin, and Emby. | None |
| [**onionprobe**](../stacks/onionprobe/README.md) | Tor Onion Services monitoring: continuously probes a set of onion endpoints, exports metrics to Prometheus, and provides Grafana dashboards and Alertmanager alerts. Uses the [official Tor Project Onionprobe](https://onionservices.torproject.org/apps/web/onionprobe/) stack with service names prefixed so it does not clash with your existing Prometheus/Grafana. | None |
| [**onionscan**](../stacks/onionscan/README.md) | CLI tool for investigating Tor hidden services (onion sites). Scans for operational security issues and misconfigurations (e.g. mod_status, directory listings, EXIF, server fingerprinting). Useful for hidden-service operators and researchers. | None |
| [**open-notebook**](../stacks/open-notebook/README.md) | An open source, privacy-focused alternative to Google's Notebook LM with support for multiple AI providers. | None |
| [**open-webui**](../stacks/open-webui/README.md) | Self-hosted chat interface for Ollama and OpenAI-compatible APIs. It can run without an internet connection when configured with local providers. | None |
| [**openai-oauth**](../stacks/openai-oauth/README.md) | Community ChatGPT account proxy, built from the pinned [openai-oauth 2.0.0 package](https://github.com/EvanZhouDev/openai-oauth/tree/v2.0.0/packages/openai-oauth). This is a third-party project, not the official OpenAI API. Node and npm dependencies are pinned by digest and lockfile. | None |
| [**opengist**](../stacks/opengist/README.md) | OpenGist is a self-hosted Gist service backed by Git, providing paste/snippet sharing with syntax highlighting. | None |
| [**openspeedtest**](../stacks/openspeedtest/README.md) | OpenSpeedTest is a self-hosted HTML5 network speed test tool that runs entirely in the browser. | None |
| [**outline**](../stacks/outline/README.md) | [Outline](https://www.getoutline.com/) is a collaborative knowledge base. This stack runs Outline with Postgres, Redis, S3-compatible storage such as MinIO, and Caddy. Authentication uses an external identity provider such as Keycloak or Authentik. | None |
| [**paperclip**](../stacks/paperclip/README.md) | Orchestrate AI agents, assign work, and track budgets from a web dashboard. Paperclip includes email/password authentication through Better Auth. | None |
| [**paperless-ai-next**](../stacks/paperless-ai-next/README.md) | AI-assisted classification and OCR rescue workflows for `paperless-ngx`. | None |
| [**paperless-gpt**](../stacks/paperless-gpt/README.md) | LLM and OCR augmentation service for `paperless-ngx`. | None |
| [**paperless-ngx**](../stacks/paperless-ngx/README.md) | Document management: scan, OCR, and search your paperwork. | None |
| [**password-pusher**](../stacks/password-pusher/README.md) | Secure password and secret sharing: create shareable links with **view limits** and **expiration**. Recipients see the secret once (or a set number of times), then the link expires. Optional passphrase for extra protection. | None |
| [**peanut**](../stacks/peanut/README.md) | PeaNUT is a self-hosted web dashboard for monitoring UPS devices via Network UPS Tools (NUT). | None |
| [**pgadmin**](../stacks/pgadmin/README.md) | pgAdmin 4 is the leading open-source web-based administration and development platform for PostgreSQL. | None |
| [**phoneinfoga**](../stacks/phoneinfoga/README.md) | Phone number OSINT tool: looks up basic information about a phone number (country, carrier, line type, VOIP or mobile) and searches for web footprints using multiple search engines and sources. Exposes a web UI and REST API. | None |
| [**picard**](../stacks/picard/README.md) | MusicBrainz Picard is an advanced music tagger and organizer. This stack provides a browser-accessible Picard UI and mounts both your main library and a staging import directory so you can review, tag, and move files into your canonical music tree. | None |
| [**pihole**](../stacks/pihole/README.md) | This stack runs Pi-hole for network-wide ad blocking and DNS filtering in Docker. | None |
| [**plaso**](../stacks/plaso/README.md) | Digital forensics timeline tool. [Plaso](https://plaso.readthedocs.io/) (log2timeline) extracts timestamps from disk images, directories, and evidence files into a single timeline; `psort` writes that to CSV, JSON, or other formats. Use for incident response, artifact analysis, and timeline reconstruction. | None |
| [**plex**](../stacks/plex/README.md) | Self-hosted media server for movies, TV shows, and music. Plex serves your media library to web, mobile, TV apps, and other clients. | host network: plex |
| [**pocketbase**](../stacks/pocketbase/README.md) | PocketBase provides a SQLite database, authentication, REST/realtime APIs, and an admin dashboard for small apps and homelab projects. | None |
| [**postfix**](../stacks/postfix/README.md) | Central **SMTP relay ("null client")** for your Docker stacks, based on [`boky/postfix`](https://github.com/bokysan/docker-postfix). Apps send mail to this container; it then relays via your real mail provider (SES, Mailgun, SMTP relay from your ISP, etc.). | None |
| [**posthog**](../stacks/posthog/README.md) | [PostHog](https://posthog.com/) is product analytics, session replay, feature flags, and experimentation. The **hobby** deployment is PostHog's supported Docker Compose layout (Postgres, ClickHouse, Kafka, Temporal, MinIO, SeaweedFS, workers, and an **internal Caddy** `proxy` service that routes traffic to `web`, capture, livestream, etc.). | None |
| [**postiz**](../stacks/postiz/README.md) | Postiz is an open-source social media scheduling and management platform supporting multiple networks. | None |
| [**presidio**](../stacks/presidio/README.md) | Microsoft Presidio is a data protection and PII detection/anonymization API for text and images. | None |
| [**privatebin**](../stacks/privatebin/README.md) | Encrypted pastebin: share text snippets with optional expiration and password. No account required; pastes are encrypted in the browser before upload. | None |
| [**privotron**](../stacks/privotron/README.md) | CLI tool to automate opting out of data brokers. Uses Playwright to fill opt-out forms so you don't have to do it by hand. Tracks which brokers you've already opted out from via profiles. No upstream Docker image; built from source. | None |
| [**prometheus**](../stacks/prometheus/README.md) | Metrics collection and storage. Scrapes cAdvisor (container metrics), optional Watchtower `/v1/metrics`, and itself. Grafana uses Prometheus as a datasource for dashboards. | None |
| [**promtail**](../stacks/promtail/README.md) | [Promtail](https://grafana.com/docs/loki/latest/clients/promtail/) is the log-shipping agent for Loki. It tails log files on the host and pushes them to a Loki instance. Deploy this stack **after** the Loki stack so logs are available in Grafana (Explore → Loki). | None |
| [**prowlarr**](../stacks/prowlarr/README.md) | Indexer manager and proxy for Usenet and torrents. Prowlarr manages indexers centrally and syncs them to Sonarr, Radarr, Lidarr, Readarr, and other *arr apps. | None |
| [**pwntools-gdb**](../stacks/pwntools-gdb/README.md) | pwntools + GDB/pwndbg is a containerized CTF and exploit-development environment with Python pwntools and a patched GDB. | None |
| [**qbittorrent**](../stacks/qbittorrent/README.md) | Torrent client with **all traffic routed through a VPN** (Gluetun). Intended for automated downloads from the *arr apps. The media tree is mounted once at `/data`, allowing hardlinked imports that preserve seeding without duplicating file data. | None |
| [**rackula**](../stacks/rackula/README.md) | Rackula is a static site generator that turns a Rack-compatible Ruby app into a static website. | None |
| [**radarr**](../stacks/radarr/README.md) | Movie collection manager for Usenet and torrents. Radarr monitors your wanted movies, grabs releases from NZB/torrent indexers, sends them to download clients, and organizes the resulting files. | None |
| [**readarr**](../stacks/readarr/README.md) | Bookshelf is a Readarr revival for managing ebook or audiobook collections with Usenet and torrents. This stack uses its Hardcover-backed image for higher-quality metadata. | None |
| [**reconftw**](../stacks/reconftw/README.md) | Automated recon framework that orchestrates many tools (subdomain enumeration, port scanning, screenshots, Nuclei, directory fuzzing, OSINT, etc.) into a single workflow. Designed for offensive recon and bug bounty style asset discovery. | None |
| [**resilio**](../stacks/resilio/README.md) | Resilio Sync (formerly BitTorrent Sync) is a peer-to-peer file synchronization tool for homelab and private file sharing. | None |
| [**responder-mitm6**](../stacks/responder-mitm6/README.md) | Responder and mitm6 are network penetration testing tools for LLMNR/NBT-NS/WPAD poisoning and IPv6 MitM attacks. | host network: responder-mitm6 |
| [**restic**](../stacks/restic/README.md) | Automated backups using [restic](https://restic.readthedocs.io/) running on a schedule, typically targeting an S3-compatible object store such as the `minio` stack in this repo. | None |
| [**romm**](../stacks/romm/README.md) | Self-hosted ROM manager: scan, enrich with metadata, browse, and play games in the browser via EmulatorJS. Supports 400+ platforms, multi-disk games, mods, and optional metadata from IGDB, Screenscraper, MobyGames, SteamGridDB, and RetroAchievements. | None |
| [**rtorrent**](../stacks/rtorrent/README.md) | Standalone rTorrent service for manual torrent downloads. It stores session state in `rtorrent_data` and downloads in the shared external `torrents_manual` volume. | None |
| [**rtorrent-flood**](../stacks/rtorrent-flood/README.md) | Manual torrent stack for **hand‑curated torrents from private trackers**. Uses the LinuxServer.io `rtorrent-flood` image, which bundles the rTorrent daemon with the Flood web UI. | None |
| [**rustdesk**](../stacks/rustdesk/README.md) | Self-hosted **ID / rendezvous** (`hbbs`) and **relay** (`hbbr`) for [RustDesk](https://rustdesk.com) remote desktop. Traffic stays on infrastructure you control; clients use your public hostname or IP with the ports below. | host network: rustdesk-hbbr, rustdesk-hbbs |
| [**rustfs**](../stacks/rustfs/README.md) | RustFS is a high-performance, S3-compatible object storage server written in Rust. | None |
| [**rutorrent**](../stacks/rutorrent/README.md) | LinuxServer.io ruTorrent deployment with persistent configuration and the shared `torrents_manual` download volume. | None |
| [**scrutiny**](../stacks/scrutiny/README.md) | [Scrutiny](https://github.com/AnalogJ/scrutiny) provides a web UI and alerting for disk SMART metrics. It helps you monitor drive health and catch failing disks early. | privileged: scrutiny |
| [**scrypted**](../stacks/scrypted/README.md) | Scrypted is a home automation and camera management platform with AI-powered plugins for smart home integration. | host network: scrypted |
| [**seafile**](../stacks/seafile/README.md) | [Seafile](https://www.seafile.com/) is a self-hosted file sync and sharing platform with desktop and mobile clients. This example runs Seafile 14 Community Edition with MariaDB and an authenticated Redis cache behind Caddy. | None |
| [**searx-ng**](../stacks/searx-ng/README.md) | Privacy-respecting metasearch engine. Aggregates results from multiple search engines. | None |
| [**seerr**](../stacks/seerr/README.md) | [Seerr](https://seerr.dev/) is an open-source media discovery and request manager. It works with **Jellyfin**, **Plex**, or **Emby**, and forwards approved requests to **Radarr** and **Sonarr**. | None |
| [**shlink**](../stacks/shlink/README.md) | Self-hosted **URL shortener**: short links, redirects, REST API, visit analytics, and optional geolocation. Use the web UI at [app.shlink.io](https://app.shlink.io) (add your server URL and API key) or self-host the web client. Separate from YOURLS (which lives at `urls.yourdomain.com` in this repo); Shlink is at `short.yourdomain.com`. | None |
| [**simplelogin**](../stacks/simplelogin/README.md) | Email alias service: create unlimited aliases (e.g. `shop@yourdomain.com`) that forward to your real inbox. Reply anonymously, block spam per alias, integrate with Bitwarden/1Password. Self-hosted fork of the Proton-owned SimpleLogin app. | None |
| [**slink**](../stacks/slink/README.md) | Self-hosted **image sharing** platform: upload images (PNG, JPG, WEBP, SVG, AVIF, HEIC, etc.), create collections, share links, ShareX integration, optional guest uploads. Built with Symfony and SvelteKit. | None |
| [**snipe-it**](../stacks/snipe-it/README.md) | IT asset management (hardware, software licenses, accessories, consumables). This stack runs Snipe-IT with a MariaDB backend and exposes the web UI via Caddy. | None |
| [**snowflake-relay**](../stacks/snowflake-relay/README.md) | Snowflake is a Tor pluggable transport proxy that helps censored users reach the Tor network via WebRTC. | floating image: snowflake-relay |
| [**social-hunt**](../stacks/social-hunt/README.md) | OSINT framework for homelab-user discovery across 500+ platforms, breach lookups (Have I Been Pwned, BreachVIP, Snusbase, LeakCheck), face matching, reverse image search, and optional AI demasking. Includes a web dashboard and CLI. | None |
| [**sonarr**](../stacks/sonarr/README.md) | TV series management for Usenet and torrents. Sonarr monitors your library, grabs new episodes from NZB/torrent indexers, sends them to your download clients, and organizes the resulting files. | None |
| [**soulseek**](../stacks/soulseek/README.md) | Self-hosted Soulseek client stack using [slskd](https://github.com/slskd/slskd): web UI, API, and background Soulseek connectivity in one container. | None |
| [**spiderfoot**](../stacks/spiderfoot/README.md) | Automated OSINT tool with 180+ modules for domains, IPs, emails, BTC addresses, homelab-users and more. Aggregates data from many sources (DNS, breaches, Shodan, GreyNoise, cloud buckets, social media, etc.) into a single web UI. | None |
| [**stirling-pdf**](../stacks/stirling-pdf/README.md) | [Stirling-PDF](https://www.stirlingpdf.com/) is a web-based PDF toolkit: merge, split, rotate, watermark, OCR, convert to/from images, and more. This stack runs Stirling-PDF behind Caddy. No host ports; access via Caddy. | None |
| [**stoat**](../stacks/stoat/README.md) | Self-hosted, user-first chat platform (channels, DMs, threads, media, voice) compatible with the official Stoat clients. This stack embeds the upstream `stoatchat/self-hosted` services but **does not expose any host ports** – all access goes through the main `caddy` reverse proxy in this homelab. | None |
| [**sublist3r**](../stacks/sublist3r/README.md) | Subdomain enumeration tool that discovers subdomains for a given domain using multiple search engines and techniques. Often used as a first step in recon workflows. | None |
| [**super-productivity**](../stacks/super-productivity/README.md) | Self-hosted productivity app (tasks, timeboxing, focus, and planning UI) served as a web app behind Caddy. | floating image: super-productivity |
| [**syncthing**](../stacks/syncthing/README.md) | [Syncthing](https://syncthing.net/) is a continuous file synchronization tool that keeps folders in sync across devices without a central server. | None |
| [**tailscale-exporter**](../stacks/tailscale-exporter/README.md) | tailscale-exporter is a Prometheus exporter that exposes Headscale node and network metrics. | None |
| [**tautulli**](../stacks/tautulli/README.md) | Tautulli is a monitoring and statistics tracker for Plex Media Server. | None |
| [**terminus**](../stacks/terminus/README.md) | [Terminus](https://github.com/usetrmnl/terminus) is the self-hosted API and web backend for [TRMNL](https://usetrmnl.com/) e-paper devices. This stack runs the official image with PostgreSQL, Valkey (Redis-compatible), and a Sidekiq worker, matching the upstream [compose.yml](https://github.com/usetrmnl/terminus/blob/main/compose.yml) layout adapted for Caddy (no published host ports on the app or data stores). | None |
| [**termix**](../stacks/termix/README.md) | Self-hosted SSH and remote desktop management with a browser terminal, file tools, and optional plugins. | None |
| [**theharvester**](../stacks/theharvester/README.md) | Classic OSINT tool to collect emails, subdomains, hosts, open ports, and banners from multiple public sources (search engines, PGP servers, Shodan, etc.). This stack runs the **REST API** variant (`restfulharvest`) so you can query theHarvester over HTTP from other tools and scripts. | None |
| [**thelounge**](../stacks/thelounge/README.md) | The Lounge is a self-hosted, always-on IRC web client with persistent connection and multi-user support. | None |
| [**threat-dragon**](../stacks/threat-dragon/README.md) | Threat modeling tool: create diagrams, document threats (STRIDE, etc.), and optionally save models to GitHub, Bitbucket, or GitLab. [OWASP Threat Dragon](https://owasp.org/www-project-threat-dragon/) runs as a web app, no host ports; access via Caddy. | None |
| [**tika**](../stacks/tika/README.md) | Apache Tika is a content detection and extraction toolkit that parses text and metadata from hundreds of file types. | None |
| [**torbot**](../stacks/torbot/README.md) | Dark Web OSINT tool: crawl .onion sites, extract links and emails, check if links are live, save results as JSON or tree. [OWASP TorBot](https://owasp.org/www-project-torbot/) project; upstream [DedSecInside/TorBot](https://github.com/DedSecInside/TorBot). The stack defaults to the repository's GHCR build; set `TORBOT_IMAGE` to use the Harbor mirror or another registry. | None |
| [**trilium**](../stacks/trilium/README.md) | TriliumNext Notes is a self-hosted hierarchical note-taking application with rich text, code blocks, and relation maps. | None |
| [**tubearchivist**](../stacks/tubearchivist/README.md) | Archive and browse a YouTube video library with subscriptions, playlists and searchable metadata. | None |
| [**twitch-drops-miner**](../stacks/twitch-drops-miner/README.md) | This stack runs [TwitchDropsMiner](https://github.com/rangermix/TwitchDropsMiner) using Docker Compose. | None |
| [**umami**](../stacks/umami/README.md) | [Umami](https://umami.is/) is a self-hosted, privacy-focused web analytics dashboard. You add websites in the UI, embed a small `script.js` on pages you want to measure, and view traffic in Umami. | None |
| [**unbound**](../stacks/unbound/README.md) | Unbound is a validating, recursive, caching DNS resolver for private DNS resolution in your homelab. | None |
| [**uptime-kuma**](../stacks/uptime-kuma/README.md) | Self-hosted uptime monitoring and status page. Monitors HTTP(s), TCP, ping, and more; supports many notification channels (Telegram, email, Discord, etc.). | Docker socket: uptime-kuma-docker-socket-proxy |
| [**vane**](../stacks/vane/README.md) | Privacy-focused AI-powered answering engine that combines web search with AI models for cited answers. Vane uses `ingress-public` for Caddy and `ai-backend` for shared AI/search backends. | None |
| [**vaultwarden**](../stacks/vaultwarden/README.md) | Lightweight, self-hosted password manager compatible with Bitwarden clients (browser extensions, mobile apps, CLI). | None |
| [**vector**](../stacks/vector/README.md) | Vector is a log collection and routing agent. This stack ships host and container logs to the existing Loki stack for centralized search and dashboards in Grafana. It is an alternative to Grafana Alloy; do not enable both Docker collectors at the same time or Loki will receive duplicate container logs. | None |
| [**vikunja**](../stacks/vikunja/README.md) | [Vikunja](https://vikunja.io/) is a self-hosted task and project manager (lists, kanban, Gantt, CalDAV). This stack runs Vikunja with SQLite behind Caddy. No host ports; access via Caddy. | None |
| [**wallos**](../stacks/wallos/README.md) | Track subscriptions, recurring expenses, and renewal notifications. | None |
| [**watchtower**](../stacks/watchtower/README.md) | Automatically updates running containers when new images are available. Uses the Docker socket on the host. | Docker socket: watchtower |
| [**web-check**](../stacks/web-check/README.md) | Web-Check collects DNS, TLS, hosting, performance, and security information for a supplied website. | None |
| [**whisparr**](../stacks/whisparr/README.md) | Adult movie collection manager for Usenet and torrents (Servarr family). Monitors indexers, sends grabs to download clients, and organizes files, same workflow as Radarr, separate library and metadata. | None |
| [**whisper-asr**](../stacks/whisper-asr/README.md) | For faster inference, switch the image to **`onerahmet/openai-whisper-asr-webservice:latest-gpu`**, set **`ASR_DEVICE=cuda`**, install the **NVIDIA Container Toolkit**, and add the same **`deploy.resources.reservations.devices`** NVIDIA block used in `stacks/ollama/docker-compose.yml`. | None |
| [**wireguard**](../stacks/wireguard/README.md) | Remote access VPN server so you can connect laptops and phones into your homelab over WireGuard. This stack runs the LinuxServer.io WireGuard image and exposes **UDP 51820** on the host. No HTTP UI; peer configs and QR codes are generated under the `wireguard_config` volume. | None |
| [**woodpecker-ci**](../stacks/woodpecker-ci/README.md) | [Woodpecker CI](https://woodpecker-ci.org/) is a lightweight, Docker-native CI/CD system. This stack runs a Woodpecker server and agent with Postgres, designed to integrate with your `gitea` stack as the Git provider. | Docker socket: agent |
| [**yourls**](../stacks/yourls/README.md) | Self-hosted URL shortener: one app with web UI, API, and redirects. No path routing, Caddy just reverse-proxies the host to the container. | None |
| [**zed-attack-proxy**](../stacks/zed-attack-proxy/README.md) | Web application and API security scanner. This stack runs ZAP with the **Webswing UI and proxy**; access it through your browser or via ZAP desktop/scripts pointing at the proxy port via Caddy. | None |
| [**zigbee2mqtt**](../stacks/zigbee2mqtt/README.md) | Bridge Zigbee devices to MQTT so they can be used by Home Assistant, Node-RED, and other automation tools. | None |
| [**zimi**](../stacks/zimi/README.md) | Read, search and manage a Kiwix ZIM library through an authenticated web interface and API. | None |
<!-- STACK_CATALOG_GENERATED_END -->