Skip to content

Every stack, by what you want done

Every stack the repository ships is listed here, grouped by what you want done rather than by the directory it sits in. Several groups hold more than one tool for the same job on purpose, and the order inside a group is alphabetical, not a ranking.

Each entry shows facts, not a grade: the pinned version and when upstream released it, whether upstream has released a newer one, the CRITICAL and HIGH findings the upstream images carry, and when the stack last ran on a host — with a restore where a backup of its data came back. A host run tests the setup; when the pin has moved since, the entry names the version that ran. Every stack meets the security baseline or carries a documented exception, because CI enforces it. A guide, where one exists, is in the sidebar under Infrastructure or Applications.

121 stacks in 14 groups.

Infrastructure

  • acme-certs0.2.1released 2026-05-04

    Certificates for devices that never pass through the reverse proxy: NAS, routers, mail servers

    1 service

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 3 CRITICAL · 46 HIGHFilesUpstream

  • dnsmasq2.93released 2026-08-20

    DNS forwarder with wildcard zones for split-DNS setups

    1 service

    Newest upstream releaseLast run on a host 8 November 2026FilesUpstream

  • Dockhand1.0.57released 2026-11-04

    Docker management with Git-based stacks: deploy and update by pushing to Git

    3 services · PostgreSQL

    Licence and edition facts
    Commercial model
    commercial licence source, checked 2026-09-21
    Edition gating
    Enterprise Features are gated by a License Key, which the licence forbids sharing, publishing or circumventing source, checked 2026-09-21
    Use restrictions
    production use is granted free only for personal non-commercial use, recognised non-profit and charitable organisations, and schools or non-commercial research institutions. **Production use by or on behalf of a company, sole trader, public body or any other organisation requires a Commercial Licence**, and offering it to third parties as a hosted, managed or SaaS container-management service requires a separate written agreement source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026, with a restoreIn the upstream images: 1 CRITICAL · 33 HIGHFilesUpstream

  • Hawser0.2.53released 2026-10-30

    Remote Docker agent for Dockhand, connecting outbound so the managed host publishes no port

    1 service

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 3 HIGHFilesUpstream

  • headscale0.29.7released 2026-10-30

    Self-hosted control server for Tailscale clients — node registry, keys and access policy for a tailnet you run

    1 service

    Licence and edition facts
    Commercial model
    no paid edition source, checked 2026-09-23
    Edition gating
    none — one open-source implementation, no paid tier source, checked 2026-09-23
    Use restrictions
    none source, checked 2026-09-23

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 4 HIGHFilesUpstream

  • Host Watchdog

    Optional host scripts that restart the Docker daemon or the proxy after a confirmed, sustained failure

    No licence or edition fact an operator decides on — checked 2026-09-21

    Upstream not checked at this pinLast run on a host 9 November 2026Files

  • Portainer Agent2.45.3released 2026-10-21

    Remote Docker agent for Portainer

    1 service

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 6 HIGHFilesUpstream

  • Portainer CE2.45.3released 2026-10-21

    Docker management web interface, reaching Docker through a filtered socket proxy

    2 services

    Licence and edition facts
    Commercial model
    paid self-hosted edition; a separate free tier for homelab, personal and learning use is offered source, checked 2026-09-21
    Edition gating
    Portainer lists role-based access control, Active Directory with automatic user sync, pre-configured SSO provider templates, and authentication and activity logs as Business Edition features source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 6 HIGHFilesUpstream

  • Traefik Reverse Proxy3.7.17released 2026-10-30

    Reverse proxy: TLS, access policies and security headers in front of every other service

    2 services

    Licence and edition facts
    Commercial model
    free self-hosted; Traefik Hub is sold as a separate product built on it source, checked 2026-09-21
    Edition gating
    Traefik Proxy is complete as ingress controller, reverse proxy and load balancer. A native web application firewall, the LDAP, JWT, OAuth and OIDC authentication middleware, HashiCorp Vault integration, distributed rate limiting, HTTP caching and multi-cluster management belong to Traefik Hub, a separate commercial product source, checked 2026-09-21

    Newest upstream releaseLast run on a host 1 November 2026In the upstream images: 0 CRITICAL · 7 HIGHFilesUpstream

  • UniFi Network Application10.6.109released 2026-11-03

    Controller for Ubiquiti UniFi network devices

    2 services · MongoDB

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 12 CRITICAL · 57 HIGHFilesUpstream

Identity, access and secrets

  • Authelia4.39.28released 2026-09-17

    Login portal with two-factor authentication that Traefik asks through forward-auth

    3 services · PostgreSQL + Redis

    No licence or edition fact an operator decides on — checked 2026-09-26

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 1 CRITICAL · 26 HIGHFilesUpstream

  • Authentik2026.8.5released 2026-10-21

    Identity provider with forward-auth, OAuth2, OpenID Connect and SAML

    4 services · 1 one-shot · PostgreSQL + Redis

    Licence and edition facts
    Commercial model
    per-user subscription source, checked 2026-09-21
    Edition gating
    enhanced audit logging, client certificate authentication, RADIUS EAP-TLS, password history compliance, privileged access management, account lockdown, and Google Workspace and Microsoft Entra ID provisioning are listed as Enterprise; the list does not include the OIDC or SAML provider source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026, with a restoreIn the upstream images: 2 CRITICAL · 47 HIGHFilesUpstream

  • Hemmelig7.6.1released 2026-09-25

    Ephemeral secret sharing with a built-in request flow

    1 service

    Newest upstream release · upstream archivedLast run on a host 8 November 2026In the upstream images: 7 CRITICAL · 30 HIGHFilesUpstream

  • Infisical0.167.7released 2026-11-08

    Central secret manager, an alternative to per-stack Docker Secrets

    3 services · PostgreSQL + Redis

    Licence and edition facts
    Use restrictions
    none for the MIT-licensed portion; content under any `ee/` directory is under the separate licence in `ee/LICENSE` source, checked 2026-09-21

    Newest upstream releaseLast run on a host 9 November 2026, with a restoreIn the upstream images: 1 CRITICAL · 27 HIGHFilesUpstream

  • JumpServer5.1.1released 2026-10-20

    Privileged access management: stored target credentials, session recording, approval workflows

    1 service

    Licence and edition facts
    Commercial model
    paid self-hosted edition source, checked 2026-09-21
    Edition gating
    the Community edition carries LDAP, CAS, OIDC, SAML2, OAuth2 and RADIUS authentication, role and organisation management, asset session monitoring, session command auditing, file-transfer tracking, login audit logs and command filtering. Enterprise adds LDAP high availability, chat-platform integrations, passkey support, cloud asset synchronisation and RemoteApp or VirtualApp delivery source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 19 CRITICAL · 235 HIGHFilesUpstream

  • Keycloak26.8.2released 2026-11-05

    Identity provider for applications that speak OpenID Connect or SAML, with LDAP and AD federation

    2 services · PostgreSQL

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 1 CRITICAL · 26 HIGHFilesUpstream

  • Orion Belt1.4.0released 2026-10-24

    Privileged access gateway for SSH sessions, from a young single-maintainer project

    2 services · PostgreSQL

    Licence and edition facts
    Use restrictions
    Apache-2.0 with the Commons Clause, which withholds the right to Sell — defined as providing to third parties, for a fee or other consideration, a product or service whose value derives entirely or substantially from its functionality, including fees for hosting or for consulting and support related to it source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 1 CRITICAL · 27 HIGHFilesUpstream

  • PrivateBin2.1.1released 2026-11-04

    Zero-knowledge paste service for text and secrets

    1 service

    Newest upstream releaseLast run on a host 8 November 2026FilesUpstream

  • ShellHub0.29.3released 2026-11-05

    SSH access through agents on each target that connect out, so targets open no inbound port

    5 services · PostgreSQL + Valkey

    Upstream released v0.30.0 on 9 November 2026Last run on a host 9 November 2026In the upstream images: 1 CRITICAL · 28 HIGHFilesUpstream

  • step-ca0.30.2released 2026-03-23

    Internal certificate authority for machines and services: X.509, ACME and optional SSH certificates

    1 service

    Licence and edition facts
    Commercial model
    free self-hosted; Step CA Pro is sold as a separate drop-in replacement source, checked 2026-09-21
    Edition gating
    step-ca is complete and production-ready for self-hosting. Smallstep sells Step CA Pro as "a drop in replacement for step-ca" adding advanced features and compliance options, cloud-based integrations, a management interface and ACME device attestation source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 4 CRITICAL · 70 HIGHFilesUpstream

  • Teleport18.11.9released 2026-11-08

    Access through short-lived certificates instead of standing credentials

    1 service

    Licence and edition facts
    Use restrictions
    the compiled binaries, container images and AMIs — which is what this stack deploys — have carried the Teleport Community Edition commercial licence rather than Apache-2.0 since Teleport 16. Under it a company may use Community Edition only with fewer than 100 employees **and** less than $10M annual revenue, and may not resell or embed it; individuals are unrestricted for personal use. Compiling the AGPLv3 source yourself is the alternative source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 2 HIGHFilesUpstream

  • Vaultwarden1.37.5released 2026-11-01

    Password manager: logins, TOTP and shared collections

    2 services · MariaDB

    Newest upstream releaseLast run on a host 9 November 2026, with a restoreIn the upstream images: 1 CRITICAL · 28 HIGHFilesUpstream

  • Warpgate0.30.4released 2026-11-03

    Lightweight access proxy for SSH, HTTPS, databases, Kubernetes, RDP and VNC

    1 service

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 2 HIGHFilesUpstream

  • Yopass16.1.0released 2026-11-07

    Self-destructing links for handing someone a credential once

    2 services · Memcached

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 2 HIGHFilesUpstream

Security operations

  • CISO Assistant4.2.2released 2026-11-08

    Governance, risk and compliance: frameworks such as ISO 27001 and NIS2 mapped to controls, risks and evidence

    4 services · PostgreSQL

    Licence and edition facts
    Commercial model
    paid self-hosted edition source, checked 2026-09-21
    Edition gating
    SSO/SAML, the API, multiple frameworks and self-hosting are in the community edition; the Pro edition adds, among others, SCIM group provisioning, fine-grained per-object permissions, a multi-level domain hierarchy and custom fields source, checked 2026-09-21
    Use restrictions
    none — the community images this stack pins are released under AGPLv3, and the commercially licensed code in `enterprise/` ships only in separate enterprise binaries source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 1 CRITICAL · 27 HIGHFilesUpstream

  • CrowdSec1.8.2released 2026-10-26

    Threat detection from logs, with a choice of where decisions are enforced

    1 service

    Newest upstream releaseLast run on a host 9 November 2026, with a restoreIn the upstream images: 0 CRITICAL · 10 HIGHFilesUpstream

  • DefectDojo3.5.0released 2026-11-02

    Vulnerability management: import scanner and pentest findings, deduplicate them and track them to closure

    6 services · 1 one-shot · PostgreSQL + Valkey

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 3 CRITICAL · 96 HIGHFilesUpstream

  • Dependency-Track5.2.1released 2026-10-25

    Software composition analysis: SBOMs, components and known vulnerabilities across a portfolio

    3 services · PostgreSQL

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 3 CRITICAL · 36 HIGHFilesUpstream

  • DFIR-IRIS2.4.29released 2026-08-10

    Collaborative incident-response case management: cases, indicators, evidence and timelines

    4 services · RabbitMQ

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 28 CRITICAL · 921 HIGHFilesUpstream

  • OpenCanary0.9.10released 2026-09-21

    Honeypot: fake network services that log every connection attempt

    1 service

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 8 CRITICAL · 111 HIGHFilesUpstream

  • OWASP Threat Dragon2.6.2released 2026-05-10

    Threat modelling: data-flow diagrams, trust boundaries, threats and mitigations

    1 service

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 2 CRITICAL · 30 HIGHFilesUpstream

  • Velociraptor0.77.3released 2026-10-05

    Endpoint forensics and threat hunting across a fleet, driven by queries

    1 service

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 10 HIGHFilesUpstream

AI and local AI

  • agentgateway1.7.0released 2026-10-27

    LLM and MCP gateway: one authenticated endpoint in front of model providers and MCP servers

    1 service

    Newest upstream releaseLast run on a host 8 November 2026FilesUpstream

  • Dify1.19.0released 2026-11-04

    LLM application platform: chat and workflow apps, knowledge bases, plugin-based model providers

    10 services · PostgreSQL + Redis

    Licence and edition facts
    Commercial model
    commercial licence source, checked 2026-09-21
    Use restrictions
    operating a multi-tenant environment requires written commercial permission, and the LOGO and copyright information in the console and applications may not be removed or modified; the branding condition applies to the frontend, meaning the `web/` directory and the web image source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 6 CRITICAL · 84 HIGHFilesUpstream

  • docling-serve1.38.2released 2026-10-27

    Document understanding as an API: layout, tables and Markdown or JSON export for AI pipelines

    1 service

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 15 HIGHFilesUpstream

  • Langfuse4.76.0released 2026-11-05

    LLM observability: traces, scores and prompts from any instrumented application

    6 services · ClickHouse + PostgreSQL + Redis + object storage

    Licence and edition facts
    Commercial model
    paid self-hosted edition source, checked 2026-09-21
    Edition gating
    project-level RBAC roles, audit logs, data retention policies, server-side data masking, SCIM with the organisation management API, and the instance management API require a paid licence key when self-hosting source, checked 2026-09-21
    Use restrictions
    none for the MIT-licensed portion; content under `ee/`, `web/src/ee/` and `worker/src/ee/` is under the separate licence in `ee/LICENSE` source, checked 2026-09-21

    Upstream released 4.77.0 on 9 November 2026Last run on a host 8 November 2026In the upstream images: 1 CRITICAL · 30 HIGHFilesUpstream

  • LiteLLM1.108.3released 2026-11-07

    OpenAI-compatible gateway in front of any model backend, with virtual keys, budgets and a spend log

    2 services · PostgreSQL

    Licence and edition facts
    Use restrictions
    none for the MIT-licensed portion; content under the `enterprise/` directory is under the separate licence in `enterprise/LICENSE` source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 1 CRITICAL · 27 HIGHFilesUpstream

  • obot0.28.0released 2026-11-07

    MCP gateway and agent platform — catalogues MCP servers, runs the hosted ones as containers, with an LLM gateway in front

    3 services · PostgreSQL

    Licence and edition facts
    Commercial model
    no paid edition source, checked 2026-09-23
    Edition gating
    none found — the repository is MIT throughout and names no paid tier source, checked 2026-09-23
    Use restrictions
    none source, checked 2026-09-23

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 1 CRITICAL · 33 HIGHFilesUpstream

  • Ollama0.40.15released 2026-11-03

    Local model runtime that pulls models by name and serves them on CPU or an NVIDIA GPU

    1 service · GPU optional

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 2 HIGHFilesUpstream

  • Open WebUI0.13.0released 2026-11-03

    Chat interface for any OpenAI-compatible endpoint, with accounts, history and document upload

    1 service

    Licence and edition facts
    Commercial model
    commercial licence source, checked 2026-09-21
    Use restrictions
    the Open WebUI name and branding may not be removed or altered, except for deployments whose end users do not exceed fifty individuals in any rolling thirty-day period, or with prior written permission or an executed enterprise licence source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 4 CRITICAL · 31 HIGHFilesUpstream

  • Qdrant1.20.0-unprivilegedreleased 2026-10-22

    Vector database: collections, similarity search with filters, snapshots

    1 service · Qdrant

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 9 HIGHFilesUpstream

  • vLLM0.33.0released 2026-11-02

    High-throughput OpenAI-compatible model serving on an NVIDIA GPU

    1 service · GPU required

    Newest upstream releaseNot run on a host: needs a host with an NVIDIA GPUIn the upstream images: 0 CRITICAL · 9 HIGHFilesUpstream

Documents and e-signature

Files, wiki and collaboration

  • BookStackversion-v26.09.2released 2026-10-20

    Wiki with structure: shelves, books, chapters and pages

    2 services · MariaDB

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 1 CRITICAL · 31 HIGHFilesUpstream

  • docker-mailserver17.0.0released 2026-11-05

    Mail server — Postfix, Dovecot and Rspamd in one container, configured by files, without a database or a web interface

    1 service

    Licence and edition facts
    Commercial model
    no paid edition source, checked 2026-10-03
    Edition gating
    none — one implementation, no paid tier source, checked 2026-10-03
    Use restrictions
    none source, checked 2026-10-03

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 22 HIGHFilesUpstream

  • mailserver8.1.2released 2026-11-07

    Mail server — Postfix, Dovecot and Rspamd as separate containers, with an administration interface and webmail

    7 services · MySQL + Redis

    Licence and edition facts
    Commercial model
    no paid edition source, checked 2026-10-03
    Edition gating
    none — one implementation, no paid tier source, checked 2026-10-03
    Use restrictions
    none source, checked 2026-10-03

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 2 CRITICAL · 39 HIGHFilesUpstream

  • Nextcloud35.0.2-fpm-alpinereleased 2026-11-06

    File sync and share with calendars, contacts and collaborative editing

    5 services · MariaDB + Redis

    No licence or edition fact an operator decides on — checked 2026-09-21

    Newest upstream releaseLast run on a host 9 November 2026, with a restoreIn the upstream images: 1 CRITICAL · 28 HIGHFilesUpstream

  • Seafile13.0.29released 2026-11-04

    File sync and share, community edition

    8 services · Memcached + Redis

    Upstream released 14.0.9 on 13 October 2026Last run on a host 8 November 2026, with a restoreIn the upstream images: 3 CRITICAL · 103 HIGHFilesUpstream

  • Seafile Pro13.0.29released 2026-11-04

    File sync and share, professional edition

    11 services · Elasticsearch + MariaDB + Redis

    Licence and edition facts
    Commercial model
    per-user subscription; no licence file is needed to run the Pro edition for three users source, checked 2026-09-21
    Use restrictions
    end-user customers may not redistribute it further, the software and its source may not be disclosed or made available to any third party, and derivative works may not be created or distributed source, checked 2026-09-21

    Upstream released 14.0.9 on 13 October 2026Last run on a host 8 November 2026, with a restoreIn the upstream images: 23 CRITICAL · 783 HIGHFilesUpstream

  • Stalwart1.0.3released 2026-11-04

    Mail and collaboration server — SMTP, IMAP, JMAP, calendars, contacts and files in one binary

    1 service

    Licence and edition facts
    Commercial model
    paid self-hosted edition; unlocked by a licence key source, checked 2026-10-03
    Edition gating
    multi-tenancy, branding, account archiving and un-deletion, live telemetry and alerts, AI models, masked addresses, SCIM, read replicas and sharded stores are listed as Enterprise source, checked 2026-10-03
    Use restrictions
    none for the AGPL-3.0 code source, checked 2026-10-03

    Upstream released v1.1.0 on 9 November 2026Last run on a host 8 November 2026In the upstream images: 0 CRITICAL · 3 HIGHFilesUpstream

  • Wiki.js3.2.0released 2026-11-08

    Wiki with Markdown and visual editors, per-page permissions and about twenty authentication modules

    2 services · PostgreSQL

    Licence and edition facts
    Use restrictions
    none source, checked 2026-09-23

    Upstream released 3.3.0 on 9 November 2026Last run on a host 8 November 2026In the upstream images: 1 CRITICAL · 49 HIGHFilesUpstream

Photos

  • Immich3.3.6released 2026-11-04

    Photo and video backup with mobile apps and machine-learning search

    4 services · PostgreSQL + Redis + Valkey

    Licence and edition facts
    Commercial model
    free self-hosted source, checked 2026-09-21
    Edition gating
    none — upstream states that "all features will be free, forever" and that nothing will be put behind a paywall; buying a product supports the developers and unlocks nothing source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026, with a restoreIn the upstream images: 16 CRITICAL · 102 HIGHFilesUpstream

  • LibrePhotos1.5.1released 2026-10-31

    Photo library with face recognition and search

    4 services · PostgreSQL

    Upstream released 1.6.0 on 9 November 2026Last run on a host 8 November 2026In the upstream images: 1 CRITICAL · 33 HIGHFilesUpstream

  • Lychee7.13.0released 2026-11-09

    Photo gallery

    3 services · MariaDB + Redis

    Newest upstream releaseLast run on a host 9 November 2026, with a restoreIn the upstream images: 1 CRITICAL · 28 HIGHFilesUpstream

  • PhotoPrism261029released 2026-10-29

    Photo library with machine-learning classification and WebDAV

    2 services · MariaDB

    Licence and edition facts
    Commercial model
    paid self-hosted edition source, checked 2026-09-21
    Edition gating
    the admin web UI for user management and any role beyond Super Admin, Admin and Guest, together with session monitoring and hardened security, require a paid Essentials or Plus membership; two-factor login and OpenID Connect are in the Community edition source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 1 CRITICAL · 26 HIGHFilesUpstream

  • Photoview2.4.0released 2024-06-23

    Photo gallery that reads your existing folders, with RAW support and face recognition

    2 services · MariaDB

    Newest upstream release · no release since 23 June 2024Last run on a host 8 November 2026In the upstream images: 5 CRITICAL · 55 HIGHFilesUpstream

Dashboards

  • Dashy4.9.17released 2026-11-07

    One page linking everything you run, configured in a single YAML file

    1 service

    Newest upstream releaseLast run on a host 8 November 2026FilesUpstream

  • Heimdall2.8.4released 2026-11-06

    Application launcher with widgets

    1 service

    Newest upstream releaseLast run on a host 8 November 2026, with a restoreFilesUpstream

  • Homarr2.12.0released 2026-11-06

    Dashboard with integrations into the services you run

    1 service

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 2 HIGHFilesUpstream

  • Homepage2.7.0released 2026-10-23

    Dashboard configured with YAML files

    1 service

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 9 HIGHFilesUpstream

Publishing, forms and scheduling

  • Cal.diy6.2.0-6released 2026-03-01

    Appointment booking pages, the community edition of Cal.com

    3 services · PostgreSQL + Redis

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 24 CRITICAL · 711 HIGHFilesUpstream

  • Calnode0.14.0released 2026-11-07

    Scheduling with booking pages, an admin interface and a REST API, as one binary with SQLite

    1 service

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 3 CRITICAL · 54 HIGHFilesUpstream

  • calrs1.23.3released 2026-11-09

    Scheduling with booking pages and availability read from a CalDAV calendar you already run

    1 service

    Newest upstream releaseLast run on a host 9 November 2026In the upstream images: 0 CRITICAL · 2 HIGHFilesUpstream

  • Easy!Appointments1.6.1released 2026-10-19

    Appointment booking in PHP, established since 2013

    2 services · MariaDB

    Newest upstream releaseLast run on a host 9 November 2026, with a restoreIn the upstream images: 3 CRITICAL · 80 HIGHFilesUpstream

  • Ghost6.75.0-alpinereleased 2026-11-04

    Publishing platform for blogs and newsletters, with optional Fediverse publishing

    2 services · MySQL

    Newest upstream releaseLast run on a host 8 November 2026, with a restoreIn the upstream images: 2 CRITICAL · 45 HIGHFilesUpstream

  • HeyForm3.0.6released 2026-11-01

    Form builder and response collector, with conversational forms, logic, file uploads and submission export

    3 services · MongoDB + Valkey

    Licence and edition facts
    Commercial model
    free self-hosted; the paid plans are the hosted service, billed on responses, storage and team size, with a commission on payments collected through a form source, checked 2026-09-24
    Edition gating
    none in the self-hosted build — the server carries no plan, quota or licence check; the limits on the pricing page are quotas of the hosted service source, checked 2026-09-24
    Use restrictions
    none source, checked 2026-09-24

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 13 CRITICAL · 142 HIGHFilesUpstream

  • Listmonk6.2.0released 2026-06-26

    Newsletter and mailing-list manager

    2 services · 2 one-shot · PostgreSQL

    Newest upstream releaseLast run on a host 8 November 2026, with a restoreIn the upstream images: 2 CRITICAL · 53 HIGHFilesUpstream

  • OpnForm2.8.4released 2026-11-05

    Form builder with shareable forms and submissions

    7 services · PostgreSQL + Redis

    Newest upstream releaseLast run on a host 8 November 2026, with a restoreIn the upstream images: 2 CRITICAL · 34 HIGHFilesUpstream

  • Shlink5.1.8released 2026-10-21

    URL shortener on your own domain with visit statistics and a REST API; no user accounts, API keys instead

    3 services · PostgreSQL

    Licence and edition facts
    Use restrictions
    none source, checked 2026-09-23

    Newest upstream releaseLast run on a host 8 November 2026, with a restoreIn the upstream images: 2 CRITICAL · 33 HIGHFilesUpstream

  • Tymeslot1.41.0-slimreleased 2026-11-05

    Meeting scheduling with booking pages, calendar sync and video links

    2 services · PostgreSQL

    Newest upstream releaseLast run on a host 8 November 2026, with a restoreIn the upstream images: 1 CRITICAL · 27 HIGHFilesUpstream

  • WordPress7.1.4-php8.3-apachereleased 2026-11-08

    Content management system for sites and blogs

    2 services · MariaDB

    Newer upstream release not determinableLast run on a host 8 November 2026In the upstream images: 1 CRITICAL · 28 HIGHFilesUpstream

Automation and data

  • n8n2.46.7released 2026-11-09

    Visual workflow automation

    1 service

    Licence and edition facts
    Commercial model
    commercial licence source, checked 2026-09-21
    Edition gating
    files and directories whose names contain `.ee.` are covered by a separate enterprise licence rather than by the Sustainable Use License source, checked 2026-09-21
    Use restrictions
    free for internal business purposes and for non-commercial use; it may be given to others only free of charge and for non-commercial purposes, and its licensing and copyright notices may not be altered, removed or obscured source, checked 2026-09-21

    Newest upstream releaseLast run on a host 9 November 2026, with a restoreIn the upstream images: 1 CRITICAL · 23 HIGHFilesUpstream

  • NocoDB2026.10.1released 2026-10-29

    Spreadsheet-style interface on top of a database

    1 service

    Licence and edition facts
    Use restrictions
    it may be used or modified only for your own internal business purposes or for non-commercial or personal use, and given to others only free of charge for non-commercial purposes; licensing and copyright notices may not be removed. Only the `master` and `develop` branches are licensed at all source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026FilesUpstream

  • Windmill1.864.1released 2026-11-06

    Code-first scripts, flows, APIs and scheduled jobs on a queue

    4 services · PostgreSQL

    Licence and edition facts
    Edition gating
    code behind the `enterprise` compile flag in `backend/`, and frontend code that requires a positive licence check to activate, is under a proprietary and commercial licence rather than the AGPLv3; forks must not include it source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 1 CRITICAL · 34 HIGHFilesUpstream

Developer tools

  • Adminer6.3.0-standalonereleased 2026-11-03

    Web interface onto a database another stack already runs

    1 service

    Newest upstream releaseLast run on a host 8 November 2026FilesUpstream

  • GreenMail2.1.15released 2026-10-25

    SMTP, IMAP and POP3 test server with a mailbox per recipient, for automated tests

    1 service

    Newest upstream releaseLast run on a host 9 November 2026In the upstream images: 1 CRITICAL · 3 HIGHFilesUpstream

  • httpbin0.10.4released 2026-06-16

    HTTP request and response service for testing clients: echoes requests, returns chosen status codes, redirects, delays and payloads

    1 service

    No licence or edition fact an operator decides on — checked 2026-09-21

    Newest upstream releaseLast run on a host 9 November 2026In the upstream images: 4 CRITICAL · 27 HIGHFilesUpstream

  • IT-Tools2024.10.22-7ca5933released 2024-10-22

    Collection of small utilities: converters, generators and formatters

    1 service

    Newest upstream release · no release since 22 October 2024Last run on a host 9 November 2026In the upstream images: 2 CRITICAL · 27 HIGHFilesUpstream

  • Mailpit1.33.1released 2026-11-07

    SMTP sink that catches every outgoing message and shows it, delivering nothing

    1 service

    Newest upstream releaseLast run on a host 8 November 2026FilesUpstream

  • Whoami1.12.0released 2026-07-30

    Tiny service that shows what the proxy forwards, to check routing and TLS

    1 service

    Newest upstream releaseLast run on a host 9 November 2026In the upstream images: 0 CRITICAL · 16 HIGHFilesUpstream

  • zot2.1.23released 2026-11-02

    OCI registry for your own build output

    1 service

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 1 HIGHFilesUpstream

Business operations

  • Akaunting3.3.0-vreleased 2026-10-27

    Accounting for small businesses: invoices, bills, customers, vendors, bank accounts and reports

    2 services · MariaDB

    Licence and edition facts
    Commercial model
    commercial licence source, checked 2026-09-21
    Edition gating
    the pages that create records are gated at runtime, not by the licence text: the `plan.limits` middleware runs on every GET whose last segment is `create` and asks `https://api.akaunting.com/plans/limits` for the plan, with the API key of an akaunting.com account (setting `apps.api_key`); without a key the service answers `403` and each of those pages redirects, and the image carries no switch to skip the check. Signing in, the dashboard, the lists and the reports do not touch it source, checked 2026-09-23
    Use restrictions
    production use is permitted only while it stays within two users, one company and one thousand invoices; beyond any of these a commercial licence is required, and the name, logo and branding may not be removed to create a rebranded or white-labelled version for distribution; each release converts to GPLv3 four years after it is published source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 2 CRITICAL · 86 HIGHFilesUpstream

  • Chatwoot4.19.1released 2026-10-24

    Customer support across website chat, email and messaging channels in one shared inbox

    4 services · PostgreSQL + Redis

    Licence and edition facts
    Edition gating
    everything under the repository's `enterprise/` directory is licensed under `enterprise/LICENSE` rather than MIT source, checked 2026-09-21
    Use restrictions
    none for the MIT-licensed portion; content under the `enterprise/` directory is under the separate licence defined there source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 4 CRITICAL · 53 HIGHFilesUpstream

  • Dolibarr24.0.2released 2026-11-07

    ERP and CRM: contacts, quotes, invoices, stock and accounting

    2 services · MariaDB

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 1 CRITICAL · 33 HIGHFilesUpstream

  • ERPNext16.54.0released 2026-11-06

    ERP on the Frappe framework: accounting, invoicing, stock, buying, selling, manufacturing, projects and HR

    10 services · MariaDB + Redis

    Licence and edition facts
    Commercial model
    no paid edition source, checked 2026-09-21
    Edition gating
    none — upstream states that ERPNext is 100% open source with no features behind paywalls source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 6 CRITICAL · 119 HIGHFilesUpstream

  • FacturaScripts2026.72released 2026-10-30

    Invoicing, accounting and inventory for small businesses, extended through plugins

    3 services · MariaDB

    Licence and edition facts
    Commercial model
    paid add-on; the core is free, and some plugins are sold on facturascripts.com source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 2 CRITICAL · 80 HIGHFilesUpstream

  • Invoice Ninja5.13.53released 2026-11-02

    Invoicing, quotes and payments

    4 services · MySQL + Redis

    Licence and edition facts
    Use restrictions
    Elastic License 2.0 — it may not be provided to third parties as a hosted or managed service giving them access to a substantial set of its features, the licence-key functionality may not be moved, changed, disabled or circumvented, and licensing or copyright notices may not be removed source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026, with a restoreIn the upstream images: 3 CRITICAL · 95 HIGHFilesUpstream

  • Kimai2.71.0released 2026-10-25

    Time tracking with reports and invoicing hooks

    2 services · MariaDB

    Licence and edition facts
    Commercial model
    paid add-on source, checked 2026-09-21
    Edition gating
    audit trail logs, which record changes to timesheets, customers, projects and activities, are a paid store plugin rather than part of the AGPL core; paid plugins are annual subscriptions with a perpetual fallback licence, so the last downloaded version keeps working while updates need an active subscription source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026, with a restoreIn the upstream images: 2 CRITICAL · 29 HIGHFilesUpstream

  • Leantime3.13.2released 2026-10-31

    Project management for teams that do not have a project manager —

    2 services · MySQL

    Licence and edition facts
    Commercial model
    paid add-on source, checked 2026-09-23
    Edition gating
    the platform itself is open source and free; advanced functionality is sold as marketplace plugins, for the self-hosted version as well as the hosted one, and a plugin licence is perpetual with one year of updates source, checked 2026-09-23
    Use restrictions
    none source, checked 2026-09-23

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 4 CRITICAL · 39 HIGHFilesUpstream

  • Matomo5.14.2-apachereleased 2026-10-22

    Web analytics under your control

    2 services · MariaDB

    Licence and edition facts
    Commercial model
    paid add-on; the self-hosted core itself is free source, checked 2026-09-21
    Edition gating
    SAML single sign-on is the separate LoginSaml plugin, sold under the InnoCraft EULA rather than shipped under the GPL core source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 1 CRITICAL · 28 HIGHFilesUpstream

  • Monica4.1.2-apachereleased 2024-05-04

    Personal CRM for the people in your life

    2 services · MariaDB

    Newest upstream release · no release since 4 May 2024Last run on a host 9 November 2026, with a restore (version 4.1.2)In the upstream images: 4 CRITICAL · 50 HIGHFilesUpstream

  • OpenProject CE17.9.6-slimreleased 2026-10-30

    Project management with work packages, boards and Gantt planning

    6 services · Memcached + PostgreSQL

    Licence and edition facts
    Commercial model
    paid self-hosted edition source, checked 2026-09-21
    Edition gating
    single sign-on through SAML, OpenID Connect, CAS or Kerberos is an Enterprise feature from the Professional plan upwards, and LDAP group synchronisation from the Corporate plan; two-factor authentication, plain LDAP authentication, user groups and permissions, and custom workflows are in the Community edition source, checked 2026-09-21

    Upstream released 17.9.7-slim on 9 November 2026Last run on a host 8 November 2026, with a restoreIn the upstream images: 3 CRITICAL · 53 HIGHFilesUpstream

  • Plane1.4.3released 2026-10-28

    Project management — issues, cycles, modules and pages, with a collaborative editor and public project pages

    13 services · PostgreSQL + RabbitMQ + Redis + Valkey + object storage

    Licence and edition facts
    Commercial model
    paid self-hosted edition source, checked 2026-09-24
    Edition gating
    OIDC and SAML single sign-on are in the paid editions, which are a separate codebase rather than a flag in this one source, checked 2026-09-24
    Use restrictions
    none for the Community Edition source, checked 2026-09-24

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 8 CRITICAL · 112 HIGHFilesUpstream

  • Plausible Community Edition3.2.1released 2026-05-15

    Cookie-free, GDPR-oriented web analytics — the measurement side of a company website, without a consent banner

    3 services · ClickHouse + PostgreSQL

    Licence and edition facts
    Commercial model
    free self-hosted source, checked 2026-09-23
    Edition gating
    no feature is held back from Community Edition. Upstream's own comparison names infrastructure, support, the Looker Studio connector, and a release cadence of twice a year instead of continuous source, checked 2026-09-23
    Use restrictions
    none — the name and logo are trademarks with published guidelines, which is a naming rule rather than a use restriction source, checked 2026-09-23

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 1 CRITICAL · 50 HIGHFilesUpstream

  • SolidInvoice3.1.2released 2026-10-21

    Invoicing: clients, quotes, invoices, recurring invoices and payments

    1 service

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 2 HIGHFilesUpstream

  • Twenty2.56.1released 2026-11-05

    CRM: companies, people, opportunities and tasks, with an extensible data model and an API

    4 services · PostgreSQL + Redis

    Licence and edition facts
    Edition gating
    files marked `@license Enterprise` at the top are covered by a commercial licence rather than the AGPL-3.0 source, checked 2026-09-21
    Use restrictions
    none for the AGPL-3.0 portion; individual files carrying a `/* @license Enterprise */` comment at the top are under a separate commercial licence source, checked 2026-09-21

    Upstream released v2.57.0 on 9 November 2026Last run on a host 8 November 2026In the upstream images: 1 CRITICAL · 35 HIGHFilesUpstream

  • Vikunja2.8.0released 2026-11-05

    Task and project management with lists, boards and calendars

    2 services · PostgreSQL

    Licence and edition facts
    Commercial model
    paid self-hosted edition; the Cloud offering is the same features without the operations work source, checked 2026-09-21
    Edition gating
    the self-hosted core is complete and free for personal or company use; a Pro tier for instances you host yourself adds an admin panel, audit logs and time tracking source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026, with a restoreIn the upstream images: 1 CRITICAL · 25 HIGHFilesUpstream

  • Zammad7.2.2-0045released 2026-11-06

    Helpdesk and ticket system across mail, chat and phone

    9 services · Elasticsearch + Memcached + PostgreSQL + Redis

    Upstream released 7.2.2-0047 on 9 November 2026Last run on a host 8 November 2026, with a restoreIn the upstream images: 1 CRITICAL · 33 HIGHFilesUpstream

Monitoring

  • Beszel0.21.1released 2026-10-22

    Lightweight host and per-container metrics hub

    3 services

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 8 HIGHFilesUpstream

  • Beszel Agent0.21.1released 2026-10-22

    Agent that reports a remote host's metrics to Beszel

    2 services

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 8 HIGHFilesUpstream

  • changedetection.io0.70.2released 2026-11-05

    Watches web pages for changes: restocks, prices, terms

    1 service

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 1 CRITICAL · 6 HIGHFilesUpstream

  • Checkmate3.13.1released 2026-10-22

    Uptime, certificate, hardware and container monitoring with incidents, maintenance windows and status pages

    2 services · MongoDB

    Licence and edition facts
    Commercial model
    no paid edition source, checked 2026-09-23
    Edition gating
    none — upstream states every feature ships in the open-source build, with no monitor limit and no paid support tier source, checked 2026-09-23
    Use restrictions
    none source, checked 2026-09-23

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 5 CRITICAL · 52 HIGHFilesUpstream

  • ciao1.12.0released 2026-10-25

    HTTP checks on a cron schedule with a dashboard, webhook notifications and TLS expiry warnings

    1 service

    Licence and edition facts
    Use restrictions
    none source, checked 2026-09-23

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 5 CRITICAL · 22 HIGHFilesUpstream

  • Gatus5.38.0released 2026-10-28

    Uptime and status page defined as YAML

    1 service

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 5 HIGHFilesUpstream

  • Gotify3.1.1released 2026-09-15

    Self-hosted push notifications — applications post with a token, clients hold a stream open

    1 service

    Licence and edition facts
    Use restrictions
    none source, checked 2026-09-23

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 2 CRITICAL · 31 HIGHFilesUpstream

  • Grafana + Prometheus13.3.0released 2026-10-27

    Metrics collection and dashboards — a time series database, its scraper, and the interface that queries it

    2 services

    Licence and edition facts
    Commercial model
    paid self-hosted edition source, checked 2026-09-23
    Edition gating
    Grafana keeps SAML authentication, team sync, enhanced LDAP and protected roles in the paid Enterprise edition; generic OAuth and LDAP are in the AGPL build source, checked 2026-09-23
    Use restrictions
    none source, checked 2026-09-23

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 7 HIGHFilesUpstream

  • Healthchecks5.0.3released 2026-10-27

    Dead-man's switch that alerts when a cron job or backup stops reporting

    1 service

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 9 HIGHFilesUpstream

  • ntfy2.37.2released 2026-11-04

    Push notifications over HTTP, the receiving end for every other alert

    1 service

    Licence and edition facts
    Use restrictions
    none — the repository carries both `LICENSE` (Apache-2.0) and `LICENSE.GPLv2`, and neither restricts commercial or hosted use source, checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 1 HIGHFilesUpstream

  • Scrutiny0.10.0-webreleased 2026-11-01

    S.M.A.R.T. disk health — collects the counters, keeps their history and warns before a drive fails

    2 services

    Licence and edition facts
    Commercial model
    no paid edition source, checked 2026-09-24
    Edition gating
    none — one build, no paid tier source, checked 2026-09-24
    Use restrictions
    none source, checked 2026-09-24

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 0 CRITICAL · 51 HIGHFilesUpstream

  • Uptime Kuma2.5.9released 2026-10-31

    Uptime monitoring with a status page and many notification channels

    1 service

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 7 CRITICAL · 455 HIGHFilesUpstream

  • Zabbixalpine-8.0.0released 2026-11-05

    Enterprise monitoring — agents, SNMP, IPMI and HTTP checks with triggers, escalation and history

    3 services · PostgreSQL

    Licence and edition facts
    Commercial model
    no paid edition source, checked 2026-09-24
    Edition gating
    none — one edition, every feature in the open-source build; Zabbix sells support and services rather than features source, checked 2026-09-24
    Use restrictions
    none source, checked 2026-09-24

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 1 CRITICAL · 29 HIGHFilesUpstream

Backup

  • Borgmatic2.1.6

    Deduplicated, encrypted server backup, installed on the host

    Upstream not checked at this pinLast run on a host 9 November 2026FilesUpstream

  • Kopia0.23.1released 2026-06-16

    Repository server for Kopia clients — deduplicated, encrypted snapshots from other machines, without handing them the repository password

    1 service

    Licence and edition facts
    Use restrictions
    none source, checked 2026-09-23

    Newest upstream releaseLast run on a host 8 November 2026In the upstream images: 2 CRITICAL · 58 HIGHFilesUpstream

  • Rclone Web1.76.0released 2026-11-06

    Browser interface for rclone: storage remotes, copy and sync jobs, serves and transfer statistics

    1 service

    No licence or edition fact an operator decides on — checked 2026-09-21

    Newest upstream releaseLast run on a host 8 November 2026FilesUpstream

  • UrBackup Server2.5.xreleased 2026-08-30

    Client backup for Windows, macOS and Linux, with whole-disk image restore on Windows

    1 service

    Newest upstream releaseLast run on a host 9 November 2026In the upstream images: 4 CRITICAL · 19 HIGHFilesUpstream

© 2026 SecDockBlueCode Apache-2.0Site content CC BY-NC 4.0